8799 matches found
CVE-2000-0351
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages...
CVE-2000-0368
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data...
CVE-2001-0015
Network Dynamic Data Exchange DDE in Windows 2000 allows local users to gain SYSTEM privileges via a "WMCOPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process...
CVE-2000-0308
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges...
CVE-2000-0314
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime -w option, which is not parsed properly and sets the time delay for sending packets to zero...
CVE-2000-0348
A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges...
CVE-2000-0349
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service...
CVE-2000-0375
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files...
CVE-2001-0135
The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs...
MS00-086: Webserver file request parsing (277873)
The hotfix for the 'Webserver file request parsing' problem has not been applied. This vulnerability can allow an attacker to execute arbitrary commands through the remote IIS server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10632; scriptversion"1.47";...
Security Advisory: Microsoft Outlook 2000 vCard Buffer Overrun (additional information) - Revised
-- Corsaire Limited Security Advisory -- Title: Microsoft Outlook 2000 vCard Buffer Overrun additional information - Revised Date: 01.03.01 Application: Outlook 2000, Outlook Express Environment: WinNT, Win2000 Author: Martin O'Neal [email protected] Audience: General distribution -- Scop...
CVE-2001-0146
IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service memory allocation error by repeatedly sending a series of specially formatted URL's...
CVE-2001-0146
IIS 5.0 and Exchange 2000 are vulnerable to a DoS via repeated malformed URLs that trigger a memory allocation error, disrupting IIS (and web-based mail on Exchange). The CERT/MS MS01-014 patch (and MS01-044 for IIS-only scenarios) are the remediation paths described; no exploitation details are ...
CVE-2001-0146: Undefined Security Weakness
IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service memory allocation error by repeatedly sending a series of specially formatted URL's...
WFTPD Pro 3.00 R1 Buffer Overflow
When sending a command cwd followed by a long argument 500 char '.' the server crashes with: Anwendungspopup: WFTPD Service Control: WFTPD.EXE - Fehler in Anwendung: Die Anweisung in "0x2e2e2e2e" verweist auf Speicher in "0x2e2e2e2e". Der Vorgang "read" konnte nicht auf dem Speicher durchgefЭhrt...
Security Bulletin MS01-014
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Malform...
Security Bulletin MS01-013
---------------------------------------------------------------------- Title: Windows 2000 Event Viewer Contains Unchecked Buffer Date: February 26, 2001 Software: Windows 2000 Impact: Run code of attacker's choice Bulletin: MS01-013 Microsoft encourages customers to review the Security Bulletin...
Дырка в Event Viewer из Windows 2000
Переполнение буфера при отображении детайлей события...
NT drivers are potentially vulnerable to format string bug
Many NT drivers are potentially vulnerable to "format string bug". The problem is concerned with DbgPrint function that is used for debug messages. Some drivers instead of directly call of this function use additional intermediate functions. Those functions add a prefix to an outputted string,...