4308 matches found
CVE-1999-1279
The CVE describes an interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier that allows users to view each other’s folders when the users share the same Local APPC LU. Affected components include AS/400 shared folders and Microsoft SNA Server 3.0 and earlie...
CVE-1999-1279
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...
CVE-1999-1279: Undefined Security Weakness
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...
Получение списка пользователей через 'system request' в IBM AS/400
Через функцию system request можно просматривать объекты типа USRPRF...
IBM AS/400 HTTP Server '/' attack
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as an .html or .jsp page -- by attaching an '/' to the end of a URL. Compare these two URL's: http://www.foo.com/getsource.jsp http://www.foo.com/getsource.jsp/ The later URL wil...
IBM HTTP Server on AS/400 Trailing Slash Source Code Disclosure
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as a .html or .jsp page -- by attaching an '/' to the end of a URL. %NASLMINLEVEL 70300 This script was written by Felix Huber Script audit and contributions from Carmichael...
IBM HTTP Server 1.3.x - Source Code Disclosure
IBM HTTP Server 1.3.x - Source Code Disclosure source: https://www.securityfocus.com/bid/3518/info Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' i...
Доступ к защищенным документам Adobe (protection bypass)
Можно скопировать содержимое защищенного документа используя функцию "Save As"...
CVE-1999-1012: Undefined Security Weakness
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string...
CVE-2000-1038
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request...
CVE-2000-1038
The CVE-2000-1038 entry concerns the IBM AS/400 Firewall web administration interface. It states that remote attackers can cause a Denial of Service via an empty GET request. The NVD metrics show a Network attack vector with low complexity and no authentication, resulting in Partial availability ...
CVE-2000-1038: Undefined Security Weakness
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request...
CVE-2000-1114
The CVE-2000-1114 vulnerability affects Unify ServletExec AS v3.0C. A flaw in the HTTP handling allows remote attackers to read JSP source code by sending an HTTP request that ends with certain characters (e.g., ".", "+", or "%20"). This can expose source contents and partial confidentiality leak...
CVE-2000-1114
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20"...
CVE-2000-1114: Undefined Security Weakness
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20"...
CVE-2000-1038
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request...
Disclosure of JSP source code with ServletExec AS v3.0c + web instance
Test environment ---------------- NT 4.0 SP6a IIS v4 Sun JDK v1.2.2.006 ServletExec AS v3.0C Vendor status Unify --------------------- Issue reported on October 27th to [email protected] Confirmation on November 2nd that the problem was reproduced Confirmation that the issue was forwarded t...
S.u.S.E Linux 4.x5.x6.x7.0 Slackware 3.x4.0 Turbolinux 6 OpenLinux 7.0 - fdmount Local Buffer Overflow (1)
S.u.S.E Linux 4.x5.x6.x7.0 Slackware 3.x4.0 Turbolinux 6 OpenLinux 7.0 - fdmount Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1239/info A buffer overflow exists in the 0.8 version of the fdmount program, distributed with a number of popular versions of Linux. By supplying ...
ibm.as400.smtp.DoS.txt
Date: Tue, 4 May 1999 08:53:14 +0200 From: Joachim Larsson To: [email protected] Subject: AS/400 Hello all. I played around with smtp on a as/400+domino machine and found two obvious bugs, then notified IBM, revieved a ptf, then posted here. 1: telnet host 25, then start feeding chars. After...