4114 matches found
CVE-1999-1072
Excite for Web Servers (EWS) 1.1 is affected by a local-privilege escalation where an attacker who can read Architext.conf (world-readable) can obtain the encrypted password and replay it in an HTTP request to AT-generated.cgi or AT-admin.cgi to gain privileges. Root cause: the password is stored...
CVE-1999-1071
CVE-1999-1071 affects Excite for Web Servers (EWS) 1.1. The Architext.conf authentication file is installed with world-writable permissions, allowing local users to modify the file and gain access to Excite accounts. Root cause: insecure file permissions on the authentication file. Impact: confid...
CVE-2000-0944
The CVE-2000-0944 issue affects CGI Script Center News Update 1.1. The vulnerability is in the password change flow where the original news administration password is not properly validated, enabling remote attackers to modify the password without knowing the original. Impact is unauthenticated r...
CVE-2000-0861
CVE-2000-0861 affects Mailman 1.1. The vulnerability allows a list administrator to execute arbitrary commands by injecting shell metacharacters into the %(listname) macro expansion. The root cause is improper handling of the macro expansion, enabling command execution with LOCAL attack vector an...
CVE-2000-0861
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...
CVE-2000-1155
The CVE-2000-1155 entry affects the RHDaemon component of the RobinHood 1.1 web server running on BeOS R5 Pro and earlier. The root cause is a crafted, long HTTP request that can cause a denial of service. Public details across connected sources confirm the affected product/version and the vulner...
CVE-2000-0985
CVE-2000-0985 describes a buffer overflow in All-Mail 1.1 that allows remote attackers to execute arbitrary commands via a long MAIL FROM or RCPT TO command. The provided documents confirm the vulnerability description but do not include specific affected file versions beyond All-Mail 1.1, nor re...
CVE-2000-0709
The CVE-2000-0709 issue affects Microsoft FrontPage 2000 Server Extensions 1.1, specifically the shtml.exe component. A remote attacker can trigger a denial-of-service condition by requesting a URL whose path includes a standard DOS device name, leading to partial availability impact as described...
JDK 1.1.x Listening Socket Vulnerability (was Re: BrownOrifice can break firewalls!)
On Sat, 12 Aug 2000 05:33:29 +0900 "TAKAGI, Hiromitsu" [email protected] wrote: This can be verified by trying the following refined proof of concept Applet. http://java-house.etl.go.jp/takagi/java/test/Brumleve-BrownOrifice-modified-netscape.net.URLConnection/Test.html I have confirmed that Mac O...
Sun Java Web Server 1.1 Beta - Viewable .jhtml Source
Sun Java Web Server 1.1 Beta - Viewable .jhtml Source source: https://www.securityfocus.com/bid/1891/info A vulnerability exists in Sun Microsystems' JavaWebServer for Win32, version 1.1Beta. JavaWebServer is a Java-oriented web application development platform. If a URL is submitted requesting a...
Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB933854)
A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Microsoft Dynamics CRM 2015 Email Router Update 1.1
Microsoft Dynamics CRM 2015 Email Router Update 1.1...