Drupal 4.0 - News Message HTML Injection

source: https://www.securityfocus.com/bid/5801/info Problems with Drupal could allow an attacker to execute arbitrary script code in a vulnerable client. Drupal fails to sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contain...

CVE-2002-0725

NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...

FactoSystem CMS Contains Multiple Vulnerabilities

FactoSystem CMS Contains Multiple Vulnerabilities Impact: Multiple vulnerabilities -- all allowing manipulation of the backend database Risk: High Class: Input Validation Error Affected System: IIS 4.0 or later with ASP enabled and FactoSystem CMS installed Description Multiple SQL injection...

CVE-2002-0725

CVE-2002-0725 affects NTFS on Windows NT 4.0 and Windows 2000. Local attackers can hide file usage by creating a hard link to the target file, causing the link to be recorded in the audit trail instead of the target. Root cause involves the NTFS auditing reporting hard links. Impact is local, wit...

CVE-2002-0421

IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including 1 aexp2.htr, 2 aexp2b.htr, 3 aexp3.htr , or 4 aexp4.htr...

CVE-2002-0787

The CVE-2002-0787 entry describes a cross-site scripting vulnerability in the iCon administrative web server for Critical Path inJoin Directory Server 4.0. The issue arises from reflected XSS via modified administrator URLs using the LOCID or OC parameters, allowing remote attackers to execute sc...

CVE-1999-1362

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...

CVE-2002-0121

The CVE-2002-0121 entry affects PHP 4.0 through 4.1.1, where session IDs are stored in temporary files whose names contain the session ID, enabling local users to hijack web connections. The provided documents describe the vulnerable mechanism and impact (local hijack) but do not include remediat...

Chunked encoding post can consume excessive memory on IIS 4.0 webserver

Overview Microsoft IIS 4.0, circa March 2000, contained a vulnerability that allowed an intruder to consume unlimited memory on a vulnerable server. Description Older versions of IIS 4.0, circa March 2000, contained a vulnerability in the chunked-encoding transfer mechanism that permitted an...

CVE-2001-1368

The CVE-2001-1368 entry concerns the iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04. The vulnerability could allow attackers to corrupt data. Connected sources confirm the affected product and environment, but the provided documents do not specify a ...

CVE-2002-0421

The CVE-2002-0421 entry concerns Microsoft IIS 4.0 on Windows NT where local users can bypass the password policy by directly invoking password-changing programs in the /iisadmpwd directory. The affected components are the .htr programs: aexp2.htr, aexp2b.htr, aexp3.htr, and aexp4.htr. The root c...

CVE-2002-0421

IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including 1 aexp2.htr, 2 aexp2b.htr, 3 aexp3.htr , or 4 aexp4.htr...

CVE-2001-1243

CVE-2001-1243 affects Microsoft IIS 4.0/5.0 with asp.dll Scripting.FileSystemObject. The vulnerability allows local or remote attackers to cause a denial of service (crash) by: (1) crafting an ASP program using Scripting.FileSystemObject to open a file using an MS-DOS device name, or (2) injectin...

CVE-2001-1264

HP-UX 11.04 running VirtualVault Operating System (VVOS) 4.0/4.5 contains a privilege-escalation vulnerability in the /sbin/mkacct program (mkacct) that could allow unauthorized privileged access. The issue is documented under CVE-2001-1264 and is referenced by HP Security Bulletin #0161. Remedia...

Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (4)

/ source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This condition affects IIS 4.0 and IIS 5.0. Exploitation of this...

CVE-2001-1165

The CVE-2001-1165 entry concerns Intego FileGuard 4.0, which stores user information and passwords with weak encryption. This weak crypto enables local users to escalate privileges by decrypting stored data, for example using the Disengage tool. The vulnerability is localized (local access requir...

CVE-2001-1122

Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service crash in lsass.exe by running the NT4ALL exploit program in 'SPECIAL' mode...

CVE-2001-1122

CVE-2001-1122 affects Windows NT 4.0 SP 6a. A local user with write access to winnt/system32 can trigger a denial of service (crash of lsass.exe) by running the NT4ALL exploit in ‘SPECIAL’ mode. The issue is described as a local exploit with partial availability impact. The provided documents do ...

CVE-2001-0506

CVE-2001-0506 is a buffer overflow in IIS 4.0/5.0 ssinc.dll when processing Server-Side Includes directives, allowing an attacker who can write to the web directory to trigger overflow and execute arbitrary code with the web server’s privileges (LOCAL SYSTEM). Affected products: Microsoft IIS 4.0...

CVE-1999-1363

CVE-1999-1363 affects Windows NT 3.51 and 4.0. The vulnerability allows a local attacker to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts NonPagedPool. The documented impact is a partial availability degradation; exploitation...