Decrypting passwords for BrowseGate

Product: BrowseGate by NetCPlus Version: 2.80.2 others? OS: Windows NT/2000/9x Description: BrowseGate is a proxy firewall from NetCPlus. BrowseGate is sometimes installed on servers along with other network applications including SmartServer3 with which it is made to integrate. BrowseGate instal...

CVE-2000-0792

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0725

CVE-2000-0725 affects Zope prior to 2.2.1. The vulnerability arises in the getRoles method, where access is insufficiently restricted, allowing a user who can edit DTML to modify the roles list included in a request and thereby add or modify roles. The issue is described across multiple connected...

CVE-2000-0598

The CVE-2000-0598 entry concerns Fortech Proxy+ where remote attackers can bypass access restrictions to the administration service by redirecting their connections through the telnet proxy. This describes a bypass/vector via an intermediary proxy, implying improper access control in the proxy se...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-2000-0671

Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character %00 to the URL...

CVE-2000-0528

Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...

CVE-2000-0779

CVE-2000-0779 : Check Point FireWall-1 with the RSH/REXEC setting enabled is vulnerable to remote bypass of access controls via malformed RSH/REXEC connection requests. The root cause is improper handling of certain RSH/REXEC-related data (stderr handling) that allows bypass of restrictions. All ...

CVE-2000-0684

BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file...

CVE-2000-0587: Undefined Security Weakness

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability...

CVE-2000-0598: Undefined Security Weakness

Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy...

CVE-2000-0779: Undefined Security Weakness

Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests...

CVE-2000-0786: Undefined Security Weakness

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERVGROUPS and USERVGIDS environmental variables and allow local users to bypass some access restrictions...

CVE-2000-0297

Allaire Forums 2.0.5 contains a vulnerability that allows remote attackers to bypass access restrictions to secure conferences by manipulating the rightAccessAllForums or rightModerateAllForums variables. The description does not specify affected versions beyond 2.0.5 and does not provide remedia...

CVE-2000-0297: Undefined Security Weakness

Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables...

X Server Detection

The remote host is running an X11 server. X11 is a client-server protocol that can be used to display graphical applications running on a given host on a remote client. Since the X11 traffic is not ciphered, it is possible for an attacker to eavesdrop on the connection. C Tenable Network Security...

CVE-2000-0448

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GETCONFIG command...

CVE-2000-0024: Undefined Security Weakness

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability...

CVE-2000-0144

Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...

PT-2000-1165 · Oracle · Iplanet Web Server

Name of the Vulnerable Software and Affected Versions: iPlanet Web Server version 4.1 Description: The issue allows remote attackers to cause a denial of service by sending a large number of GET commands, which consumes memory and causes a kernel panic. Recommendations: For iPlanet Web Server...