410 matches found
Broker 5.9.5.0 Directory Traversal
Broker 5.9.5.0 Directory Traversal AFFECTED SYSTEMS Broker 5.9.5.0 DESCRIPTION Broker has the same .lnk upload vulnerability than the one I recently found in WFTPD, with : PUT local.lnk remote.lnk. We can create our own link, this way, we can traverse the homedirectory. It's even easier than the...
ILMI community in olicom/crosscomm routers
Crosscomm/Olicom routers have a undocumented community string ILMI yes, the same as in cisco : that has read and write permissions i didn't check the whole tree, but you can set system.sysContact.0 for example. This was checked on a XLT-F router with software 'XL 80 IM Version 5.5 Build Level 2'...
wkit.joe.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Joe's Own Editor File Link Vulnerability ADVISORY ID: WSIR-00/11-01 CONTACT: Patrik Birgersson, Wkit Security AB CLASS: File Handling Error OBJECT: joe1 exec VENDOR: Josef H. Allen STATUS: Vendor not reachable REMOTE: No LOCAL: Yes DATE:...
CVE-2000-0748
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse...
CVE-2000-0748: Undefined Security Weakness
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse...
Проблемы с OpenLDAP
исполняемые файлы устанавливаются с разрешениями позволяющие запись для группы...
CVE-2000-0441
Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems...
excite-web.txt
Date: Mon, 30 Nov 1998 17:20:04 -0600 From: Michael Gerdts Subject: Security bugs in Excite for Web Servers 1.1 On November 11 I reported the folloing problmes to [email protected]. I have only recieved an automated reply. I have found numerous security concerns with EWS 1.1 which can lead to an...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...