7997 matches found
@stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)
@stake Inc. www.atstake.com Security Advisory Notification Advisory Name: NetDDE Message Vulnerability Release Date: 02/05/2001 Application: Network DDE system component Platform: Windows 2000 up to and including Service Pack 1 Severity: Any local user can obtain SYSTEM privileges Author: DilDog...
Microsoft Windows 98/2000 - UDP Socket Denial of Service
source: https://www.securityfocus.com/bid/2340/info Microsoft Windows 2000 and 98 are subject to a denial of service condition. Receiving a maliciously crafted email or visiting a malicious web site could prevent Windows 2000 from DNS resolution and Windows 98 from accepting any new TCP...
Security Bulletin MS01-007
---------------------------------------------------------------------- Title: Patch Available for "Network DDE Agent Request" Vulnerability Date: 05 February 2001 Software: Windows 2000 Impact: Privilege elevation Bulletin: MS01-007 Microsoft encourages customers to review the Security Bulletin...
CVE-2000-0893
The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...
CVE-2000-0893
The CVE-2000-0893 entry concerns the Distributed GL Daemon (dgld) on SGI IRIX systems. The issue is that the dgld service listening on port 5232 allows remote attackers to identify the target as SGI IRIX. This is an information-disclosure/host-identity identification risk, not a remote code execu...
CVE-2000-1090
Microsoft IIS for Far East editions 4.0 and 5.0 are affected by CVE-2000-1090, where a malformed URL employing the lead-byte of a double-byte character allows remote attackers to read source code of parsed pages. The root cause is improper handling of lead-byte in double-byte character sequences ...
CVE-2001-0048
CVE-2001-0048 affects Microsoft Windows 2000 domain controllers; the Configure Your Server tool installs a blank Directory Service Restore Mode password. This allows attackers with physical access to the controller to install malicious software. Root cause is a blank DS Restore Mode password crea...
CVE-2001-0048
The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...
Security Bulletin MS01-006
---------------------------------------------------------------------- Title: Patch Available for "Invalid RDP Data" Vulnerability Date: 31 January 2001 Software: Windows 2000 Terminal Services Impact: Denial of Service Bulletin: MS01-006 KB Article: Q286132 Available Soon Microsoft encourages...
Security hole in Virus Buster 2001
Hi folks, I found a security hole in the feature of virus scan for e-mail in Virus Buster 2001 from Trend Micro Inc. Virus Buster 2001 is a japanese software package that has similar functions of PC-cillin 2000 such as eMail Virus Scanning and Browser Scanning. The feature of virus scan for e-mai...
Allaire JRun Crafted Request Forced Directory Listing
The version of Allaire JRun running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by using a crafted URL request with '/./' prepended, to display a listing of a remote directory, even if a valid index file exists i...
Hyperseek 2000 Search Engine - "show directory & files" bug
--== NerF security gr0up advisory ==-- -------------------------------------------------------------------- Hyperseek 2000 Search Engine - "show directory & files" bug. -------------------------------------------------------------------- 1. Standart perl problem is in statistic module - file:...
iWeb Hyperseek 2000 hsx.cgi show Parameter Traversal Arbitrary File Read
The 'hsx.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescripti...
iweb hyperseek 2000 - Directory Traversal
iweb hyperseek 2000 - Directory Traversal source: https://www.securityfocus.com/bid/2314/info A specially crafted URL, composed of '../' and '%00', will disclose the directory listing and files of the target with read permissions...
CVE-2000-1045
nssldap earlier than 121, when run with nscd name service caching daemon, allows remote attackers to cause a denial of service via a flood of LDAP requests...
CVE-2000-0672
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory...
CVE-2000-0958
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window...
CVE-2000-1070
pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information...
CVE-2000-0808
The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...