CVE-2002-0301

Citrix NFuse 1.6 is affected: authentication can be bypassed by directly calling launch.asp using invalid NFUSE_USER and NFUSE_PASSWORD parameters, enabling access to sensitive information (partial confidentiality). Root cause: flawed authentication check visible in launch.asp handling of those p...

PT-2001-2267 · Symantec · Symantec Liveupdate

Name of the Vulnerable Software and Affected Versions: Symantec LiveUpdate versions prior to 1.6 Description: The issue allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site, due to the lack of cryptography to ensure the integrity of download files...

CVE-2001-0561

Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' dot dot attack in 1 a1disp2.cgi, 2 a1disp3.cgi, or 3 a1disp4.cgi...

CVE-2001-0357

FormMail vulnerability CVE-2001-0357 affects FormMail.pl (FormMail) 1.6 and earlier. An attacker can remotely modify recipient and message parameters to send anonymous email, effectively enabling spam through the vulnerable script. Connected OpenVAS data identifies affected versions (All versions...

CVE-2000-1141

The CVE-2000-1141 entry concerns Recourse ManTrap 1.6, where a kernel modification hides the ".." entry in /proc. This behavior allows attackers to determine they are in a honeypot system by inspecting /proc, indicating honeypot detection rather than a traditional remote compromise. The available...

CVE-2000-1143

Technical details (affected product/version, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates to the CVE-2000-1143 entry.

CVE-2000-1145

CVE-2000-1145 affects Recourse ManTrap 1.6. The issue arises when an attacker with root privileges uses utilities (e.g., crash, fsdb) to read /dev/mem and raw disks, enabling identification of ManTrap processes or modification of arbitrary data files. Reported impact aligns with partial confident...

CVE-2000-1144

CVE-2000-1144 affects Recourse ManTrap 1.6. The issue is that the chroot'ed root (/) has an inode number higher than normal, enabling an attacker to determine that the process is running inside a chroot environment. The available sources describe the vulnerability as exposing chroot presence (loc...

CVE-2000-1143

Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system...

CVE-2000-1226

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service crash by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan...

CVE-2000-0332

UltraBoard 1.6 is affected by a path traversal in UltraBoard.pl/UltraBoard.cgi that allows remote attackers to read arbitrary files by supplying a pathname containing .. followed by a null byte. The vulnerability is described as arbitrary file access via this traversal vector; no exploitation det...

CVE-2000-0426

CVE-2000-0426 affects UltraBoard 1.6 and other versions. The vulnerability arises when a remote attacker uses UltraBoard in the Session parameter, causing UltraBoard to fork copies of itself and trigger a denial of service. The description notes the root cause as improper handling of a Session va...

Re: Snort 1.6 and nmap 2.54beta1

From the BUGS file distributed with Snort: ------------------------------------------------------------------------- Bug reports should be sent to [email protected] Please include the following information with your report: System Architecture Sparc, x86, etc Operating System and version Linux...

UltraBoard 1.6 - Denial of Service

UltraBoard 1.6 - Denial of Service source: https://www.securityfocus.com/bid/1175/info UltraBoard 1.6 and possibly all 1.x versions and the new beta Ultraboard 2000 are vulnerable to this Denial of Service attack. A remote user is able to expend all of the available resources of the webserver by...

linux trustees 1.5 long path name vulnerability

Linux trustees is a kernel patch which provide Netware-like permissions to linux. It is not in kernel by default. For more information see project's website at http://www.braysystems.com/linux/trustees.html Problem description: When accessing a file or directory with a very long path the process...

INN < 1.6 Multiple Vulnerabilities

According to its banner, the remote version of INN is older than version 1.6. A number of security holes have been found older versions of INN, some of which may allow arbitrary command execution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10129;...