Active Web Classifieds failure to authenticate leads to arbitrary code execution

Active Classifieds Free Edition from Active Web Suite Technologies http://www.activewebsuite.com fails to authenticate administrators, which allows unauthorized modification of configuration files, which in turn, allows remote arbitrary code execution. Tested on: Program: Active Classifieds Free...

CVE-2000-0720

The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...

CVE-2000-0542

Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds...

CVE-2000-0542

Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds...

QPC Software QVT Term 4.3QVTNet 4.3 Suite FTP Server - Denial of Service

QPC Software QVT Term 4.3QVTNet 4.3 Suite FTP Server - Denial of Service source: https://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a...

QPC Software QVT Term 4.3/QVT/Net 4.3 Suite FTP Server - Denial of Service

source: https://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that is longer than 2000 characters...

National Science Foundation Squid Web Proxy 1.01.12.1 - Authentication Failure

National Science Foundation Squid Web Proxy 1.01.12.1 - Authentication Failure source: https://www.securityfocus.com/bid/741/info There is a vulnerability present in certain versions of the Squid Web Proxy Cache developed by the National Science Foundation. This problem is only in effect when use...

National Science Foundation Squid Web Proxy 1.0/1.1/2.1 - Authentication Failure

source: https://www.securityfocus.com/bid/741/info There is a vulnerability present in certain versions of the Squid Web Proxy Cache developed by the National Science Foundation. This problem is only in effect when users of the cache are using an external authenticator. The following is quoted fr...

Microsoft IIS 5.0 - User Existence Disclosure (1)

Microsoft IIS 5.0 - User Existence Disclosure 1 source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS wil...

Microsoft IIS 5.0 - User Existence Disclosure (1)

source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS will generate an error page if authentication fails...