3468 matches found
MailMan Webmail mmstdod.cgi Arbitrary Command Execution
The version of MailMan Webmail on the remote web server has an arbitrary command execution vulnerability. Input to the 'ALTERNATETEMPLATES' parameter of mmstdod.cgi is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C...
Cisco 600 Series Router HTTP GET DoS (cisco-sa-20001204-cbos)
It was possible to lock the remote router by sending the following request : GET ? An attacker may use this flaw to lock this host, thus preventing your network from working properly. %NASLMINLEVEL 70300 C Tenable network Security, Inc. Script audit and contributions from Carmichael Security Erik...
Дырка в Panda Antivirus
Открыт порт 2001, зайдя на который можно выполнить приложение на Netware сервере...
Apache for Windows Multiple Forward Slash Directory Listing
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. %NASLMINLEVEL 70300 This...
Microsoft Windows - 'April Fools 2001' Set Incorrect Date
/ source: https://www.securityfocus.com/bid/180/info Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the MSVCRT.DLL not correctly interpreting Daylight Savings ti...
Microsoft Windows - April Fools 2001 Set Incorrect Date
Microsoft Windows - April Fools 2001 Set Incorrect Date / source: https://www.securityfocus.com/bid/180/info Beginning April 1, 2001 and continuing through April 8, 2001, Windows applications will be offset by one hour - even though the system clock will show the proper time. This is due to the...
