CWE-16: Configuration, page 7

Weaknesses in this category are typically introduced during the configuration of the software.

What the weakness is: CWE-16 at MITRE. OWASP Top 10: A02:2025 Security Misconfiguration

1. –CVE-2003-1352EPSS 1.2%2003-12-31

   Gabber 0.8.7 sends an email to a specific address during user login and logout, which allows remote attackers to obtain user session activity and Gabber version number by sniffing.

2. –CVE-2003-1341ExploitEPSS 7.7%2003-12-31

   The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.

3. –CVE-2002-2373EPSS 1.3%2002-12-31

   The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access.

4. –CVE-2002-2336ExploitEPSS 2.5%2002-12-31

   Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.

5. –CVE-2002-2335ExploitEPSS 2.7%2002-12-31

   Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.

6. –CVE-2002-2331EPSS 2.1%2002-12-31

   W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by …

7. –CVE-2002-2285EPSS 2.1%2002-12-31

   eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.

8. –CVE-2002-2280EPSS 0.3%2002-12-31

   syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog serv…

9. –CVE-2002-2263EPSS 0.4%2002-12-31

   The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.

10. –CVE-2002-2247ExploitEPSS 2.6%2002-12-31

    The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.

11. –CVE-2002-2234EPSS 1.5%2002-12-31

    NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.

12. –CVE-1999-0701EPSS 1.6%2000-04-11

    After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.

13. –CVE-1999-0858EPSS 14%1999-12-02

    Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.

14. –CVE-1999-0766EPSS 7.2%1999-10-21

    The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.

15. –CVE-1999-0886ExploitEPSS 22%1999-09-17

    The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.

16. –CVE-1999-0725ExploitEPSS 25%1999-08-19

    When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".

17. –CVE-1999-0875ExploitEPSS 10%1999-08-11

    DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.

18. –CVE-1999-0656EPSS 1.6%1999-01-01

    The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.