8981 matches found
VMware ESX Server management interface logs passwords in cleartext in a world-readable file
Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...
CVE-2006-4124
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...
CVE-2006-4124
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...
[UNIX] Liblesstif Local Root (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3997
WoWRoster (World of Warcraft Roster) before 1.5.x is affected by a PHP remote file inclusion in hsList.php, exploitable via the subdir parameter to execute arbitrary PHP code on the affected server. This vulnerability arises in WoWRoster’s handling of user-supplied URLs and could allow remote cod...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3495
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...
CVE-2006-3495
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...
WoW Roster 1.70 - libphpBB.php Remote File Inclusion
WoW Roster 1.70 - libphpBB.php Remote File Inclusion -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== WoW Roster = 1.70 /lib/phpbb.php Remote File Include Vulnerability =====================================================================...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description :...
WoW Roster 1.70 - '/lib/phpBB.php' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description : Application : World of Warcraft WoW...
WoW Roster 1.5.1 - subdir Remote File Inclusion
WoW Roster 1.5.1 - subdir Remote File Inclusion -------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic -----------------------------------------------------------------------------...
WoW Roster 1.5.1 - 'subdir' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic ----------------------------------------------------------------------------- Affected software description : Application : World...
WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== WoW Roster = 1.5.1 subdir Remote File Include Vulnerability ==============================================================...
WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic ----------------------------------------------------------------------------- Affected softwar...
Weak Mercury Messenger permissions
Chat log director yis world-readable...
Mercury Messenger
Problem description: Mercury Messenger, http://www.mercury.to/, is a java based messenger that will allow it's users to chat with MSN users. Currently it has been noted by two people that on a multi user OS X platform it is possible to read the chat logs from other users. The user specific...
CVE-2006-3669
Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...