982 matches found
CVE-2000-0518
This CVE concerns Internet Explorer 4.x/5.x where SSL certificate validation is incomplete when the connection is initiated via an image or an iframe. The underlying issue is that IE verifies only that the certificate was issued by a trusted root, but does not confirm the server name or the certi...
AIX 4.24.3 - netstat -Z Statistic Clearing
AIX 4.24.3 - netstat -Z Statistic Clearing source: https://www.securityfocus.com/bid/1660/info A vulnerability exists in versions 4.x. x of AIX, from IBM. Any local user can utilize the -Z command to netstat, without needing to be root. This will cause interface statistics to be reset. This could...
CVE-2000-0342
CVE-2000-0342 (Eudora 4.x) describes a vulnerability where remote attackers can bypass the user warning for executable attachments (.exe, .com, .bat) by using a .lnk file that references the attachment, a.k.a. “Stealth Attachment.” The linked PT-2000-1308 entry confirms the affected software as E...
CVE-2000-0353
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine...
CVE-2000-0353
Pine 4.x is affected by CVE-2000-0353. A remote attacker can trigger arbitrary commands by providing an index.html that executes lynx to fetch a uudecoded file from a malicious web server, which is then executed by Pine. Impact is described as full confidentiality, integrity, and availability com...
CVE-2000-0415
Outlook Express 4.x is affected by a buffer overflow triggered by mail/news messages with a .jpg or .bmp attachment having a long filename. The vulnerability is reported to allow denial of service. The connected documents corroborate the issue as described for Outlook Express 4.x; no specific exp...
TalentSoft Web+ 4.x - Directory Traversal
TalentSoft Web+ 4.x - Directory Traversal source: https://www.securityfocus.com/bid/1102/info Web+ is an e-commerce server designed to run under a webserver, to provide web storefronts. The various scripts that are required to do this are specified to the webpsvr daemon via a 'script' variable...
CVE-2000-0162
Technical details (affected product/version, exploitability, and mitigations) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm impact and remediation guidance.
CVE-1999-0480
Midnight Commander 4.x is affected by a local denial of service via a symlink attack. The connected PT-1999-1160 entry confirms the issue in Midnight Commander 4.x and attributes it to a symlink-based condition exploitable by a local attacker to trigger DoS. No remediation or patched versions are...
Allaire ColdFusion Server 4.0/4.0.1 - 'CFCACHE' Information Disclosure
source: https://www.securityfocus.com/bid/917/info ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. When the CFCACHE tag is used in a CFM page, it creates temporary files. Some of these files are .tmp...
CVE-1999-0034
CVE-1999-0034 affects the suidperl (sperl) component in Perl 4.x and 5.x, with the root cause described as a buffer overflow in suidperl. Documented impact indicates complete confidentiality, integrity, and availability compromises (local attack vector, no authentication, no user interaction requ...
msie4.width.000.txt
Jim Paris http://home.jtan.com/jim/bugs/ie/width.html Internet Explorer 4.x "width=000..." bug Some versions of Microsoft Internet Explorer will crash when given a long "width=" or "height=" string in an image tag under the correct circumstances. In most cases, IE will stop parsing the "width="...
netscape-internal-parser.cgi
Date: Mon, 5 Oct 1998 16:33:13 -0400 From: Jim Paris To: [email protected] Subject: Remote CGI can crash Netscape 4.x Netscape 4.x will crash when given a content-type of "internal/parser". Earlier versions seem unaffected. Tested versions are 4.05 and 4.5b1. Under Win95 it simply hangs and...
netware.4.x.tts.DoS.txt
Date: Wed, 12 May 1999 14:18:59 -0500 From: Simple Nomad To: [email protected] Subject: DoS with Netware 4.x's TTS Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 12May1998 Platform : Netware 4.x Application : NDS Severity : High Synopsis -------- It is...
netscape4x.internal.parser.txt
Jim Paris http://home.jtan.com/jim/bugs/ns/parser.html Netscape 4.x "internal/parser" bug Some versions of Netscape will simply hang when given a MIME type of internal/parser. Netscape was never designed to handle this type coming from the outside world. Versions 4.04 through the most current...
netscape-4.x-DoS.txt
Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Now, some DoSes on Netscape 4.0x browsers: ------------------------------------------ Meta refresh or href to URL "mocha:document.open'300k times A';"...
PT-1999-1365 · Netscape · Netscape Communicator
Name of the Vulnerable Software and Affected Versions: Netscape Communicator version 4.x Description: The issue concerns Netscape Communicator 4.x with Javascript enabled, where it does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating...
CVE-2000-0353
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine...
PT-1997-1015 · Microsoft +1 · Internet Explorer +1
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 3.x through 4.x Netscape versions 2.x through 4.x Description: The issue allows remote attackers to monitor a user's web activities. This is related to JavaScript in the affected browsers. Recommendations: For...
CVE-1999-1022
serialports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program...