pop2d.imap.txt

Date: Wed, 26 May 1999 20:37:13 +0100 From: Chris Evans To: [email protected] Subject: Remote vulnerability in pop2d Hi Firstly, sorry if any details are hazy - this is from memory it's two months since I last looked at this. This bug concerns the pop-2 daemon, which is a part of the Washingto...

Anonymous FTP Enabled

Brute force setting must be enabled to use this plugin. Nessus has detected that the FTP server running on the remote host allows anonymous logins. Therefore, any remote user may connect and authenticate to the server without providing a password or unique credentials. This allows the user to...

Anonymous FTP Writable root Directory

It is possible to write on the root directory of the remote anonymous FTP server. This allows an attacker to upload arbitrary files which can be used in other attacks, or to turn the FTP server into a software distribution point. TRUSTED...

University of Washington pop2d 4.4 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/283/info A buffer overflow vulnerability in pop2d version 4.4 or earlier allow malicious remote users to obtain access to the "nobody" user account. The pop2 and pop3 servers support the concept of an "anonymous proxy", whereby a remote user connecting...

Microsoft Site Server 2.0 with IIS 4.0 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/1811/info Microsoft Site Server is an intranet server designed for an NT Server with IIS. Site Server enables users to locate and view information stored in various locations through personalized web pages and emails. The 'Users' directory, if not already...

CVE-1999-0497

Anonymous FTP is enabled...

CVE-1999-0527

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...

CVE-1999-0497

Anonymous FTP is enabled...

PT-1999-1174

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to Anonymous FTP being enabled. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1179 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inappropriate permissions for system-critical data in an anonymous FTP account. This includes the root directory being writeable by anyone, the ability to obtain ...

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...

CVE-1999-1298

Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources...

CVE-1999-1119

FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands...

Denial of Service Vulnerabilities in Windows SMB implementation

Advisory ID Internal CORE-220618 Bugtraq ID: 5556 CVE Name: CAN-2002-0724 CERT: VU311619, VU342243, VU250635 Title: Denial of Service Vulnerabilities in Windows SMB implementation Class: Implementation flaws Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft...

Anonymous Open Redirect - Moderately Critical - Open Redirect

More info at https://www.drupal.org/sa-core-2018-006...

Anonymous Open Redirect - Moderately Critical - Open Redirect

More info at https://www.drupal.org/sa-core-2018-006...

Security Update for Windows Server 2003 (KB970483)

A security issue has been identified that could allow an anonymous remote attacker to bypass authentication requirements of running Internet Information Services IIS. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart...

Security Update for Windows Server 2003 for Itanium-based Systems (KB970483)

A security issue has been identified that could allow an anonymous remote attacker to bypass authentication requirements of running Internet Information Services IIS. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart...