9751 matches found
Intel Corporation Shiva Access Manager 5.0 - Solaris World Readable LDAP Password
source: https://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a default configuration problem in its...
HP-UX 10.2011.0 - man tmp Symlink
HP-UX 10.2011.0 - man tmp Symlink source: https://www.securityfocus.com/bid/1302/info The programmers of the 'man' command on various HPUX releases have made several fatal mistakes that allow an attacker to trivially set a trap that could result in any arbitrary file being overwritten on the syst...
Banner Rotation 01
-- Banner rotating 01 -- -- Description: "Banner rotating 01" is a cgi script distributed for free on several site builder sites, including Hot Area. The script is available on http://www.hotarea.net/web/scripts/banner01/ The cgi script offers numerous functions for those wishing to manage rotati...
CVE-2000-0206
The CVE-2000-0206 entry concerns Oracle 8.1.5.x on Linux, where the installer follows symlinks and creates orainstRoot.sh with world-writable permissions. This configuration flaw allows local users to gain privileges. The available documents specify the vulnerable component (orainstRoot.sh during...
CVE-2000-0206
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges...
CVE-2000-0206: Undefined Security Weakness
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges...
CVE-2000-0184: Undefined Security Weakness
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords...
CVS 1.10.7 - Local Denial of Service
CVS 1.10.7 - Local Denial of Service source: https://www.securityfocus.com/bid/1136/info CVS stands for Concurrent Versions Software and is an open-source package designed to allow multiple developers to work concurrently on a single source tree, recording changes and controlling versions. It is...
CVE-2000-0458
The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information...
OpenLDAP 1.2.71.2.81.2.91.2.10 - usrtmp Symlink
OpenLDAP 1.2.71.2.81.2.91.2.10 - usrtmp Symlink source: https://www.securityfocus.com/bid/1232/info A vulnerability exists in OpenLDAP as shipped with some versions of Linux, including RedHat 6.1 and 6.2, and TurboLinux 6.0.2 and earlier. OpenLDAP will create files in /usr/tmp, which is actually ...
OpenLDAP 1.2.7/1.2.8/1.2.9/1.2.10 - '/usr/tmp/' Symlink
source: https://www.securityfocus.com/bid/1232/info A vulnerability exists in OpenLDAP as shipped with some versions of Linux, including RedHat 6.1 and 6.2, and TurboLinux 6.0.2 and earlier. OpenLDAP will create files in /usr/tmp, which is actually a symbolic link to the world writable /tmp...
CVE-2000-0145: Undefined Security Weakness
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions...
CVE-2000-0184
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords...
CVE-2000-0206
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges...
CVE-2000-0164
The installation of Sun Internet Mail Server SIMS creates a world-readable file that allows local users to obtain passwords...
snmp.writable.txt
Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...
Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community
Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source:...
SCO Unixware 7.17.1.1 - ARCserver tmp Symlink
SCO Unixware 7.17.1.1 - ARCserver tmp Symlink source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can...
SCO Unixware 7.1/7.1.1 - ARCserver /tmp Symlink
source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can be removed and replaced by any user on the...