7988 matches found
Zope < 2.1.7 DocumentTemplate Unauthorized DTML Entity Modification
The remote web server is Zope 2.1.7. There is a security problem in these versions that can allow the contents of DTMLDocuments or DTMLMethods to be changed without forcing proper user authentication. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10447; scriptversion...
old DOS still good 4 win2k
Well, nothing new on the flatline, but I think that can be useful to send this one. We tested out the win 2k beta version, and we've found that some old attacks are still valid to cause a DOS. Specifically the simple ping flood from a PII 300 to another PII 300 with 64Mb RAM, can freez the box...
Predictability Problems in IRIX Cron and Compilers
Crimelabs, Inc. www.crimelabs.com Security Note Crimelabs Security Note CLABS200004 Title: Poor Tempfile Use in IRIX: Compilers and Cron Date: 21 June, 2000 Application: MIPSPro Compilers 7.1, 7.2.1 tested, cron Platforms: IRIX 6.3, 6.5 Severity: Moderate, higher in some instances Author: Jose...
JRun viewsource.jsp Directory Traversal Arbitrary File Access
The version of JRun on the remote host has a directory traversal vulnerability in the 'source' parameter of viewsource.jsp. A remote attacker could exploit this to read arbitrary files. This could be used to read sensitive information, or information that could be used to mount further attacks...
CVE-2000-0579
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited...
CVE-2000-0607
Buffer overflow in fld program in Kanji on Console KON package on Linux may allow local users to gain root privileges via an input file containing long CHARSETREGISTRY or CHARSETENCODING settings...
CVE-2000-0608
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...
CVE-2000-0602
Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...
CVE-2000-0604
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...
fbi-aim-dos.txt
FROM THE OFFICES OF: | | | \ | | | | | | | | | |/ / | | | | | | | | / \ / | / | '| | || ' | / \ | | |/ |/ \ ' \ / / \ | || | | |/ / | | | | || | | | || / | | | | | / | | | | / | / // ,|| /| ||\||||, ||| ||\| / | |/ AOL Instant Messenger DoS Denial of Service exploit. Website:...
CVE-2000-0533
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files...
CVE-2000-0466
AIX cdmount allows local users to gain root privileges via shell metacharacters...
CVE-2000-0620
libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop...
CVE-2000-0561
Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...
CVE-2000-0529
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request...
CVE-2000-0504
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIPSTRING macro...
CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...
CVE-2000-0541
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command...
Security Bulletin (MS00-020)
Microsoft Security Bulletin MS00-020 - -------------------------------------- Patch Available for "Desktop Separation" Vulnerability Originally Posted: June 15, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000. The...
Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98
Здравствуйте , Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98 Network World http://www.nwfusion.com Если Вы работаете на сервере Windows 2000 с установленным терминальным сервисом Terminal Services, то должны знать о его потенциальной...