Lucene search
+L

5883 matches found

myhack58
myhack58
•added 2006/02/15 12:00 a.m.•24 views

Social engineering analysis, and network phishing attacks case study-vulnerability warning-the black bar safety net

Recent fishing information, Put a point out for everyone to see. In fact it is not anything new, mainly want everyone to understand what is social engineering what is phishing, the relationship between them is what will lead to the question of what to appear. Because is belongs to the presentatio...

1.1AI score
SaveExploits0
NVD
NVD
•added 2005/12/31 5:00 a.m.•31 views

CVE-2005-4759

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages...

5CVSS6.3AI score0.01092EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2005/12/23 1:00 a.m.•40 views

CVE-2005-4514

The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and...

6.5AI score0.01559EPSS
SaveExploits0References6
CVE
CVE
•added 2005/12/23 1:00 a.m.•62 views

CVE-2005-4514

CVE-2005-4514 concerns the Webwasher CSM Appliance Suite 5.x, where the encapsulation script mechanism uses case-sensitive detection of malicious tokens. This allows bypassing script detection by presenting tokens in mixed case (upper/lower). The vendor notes the issue could not be reproduced as ...

5CVSS7AI score0.01559EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2005/12/23 12:00 a.m.•19 views

PT-2005-5196 · Webwasher · Webwasher Csm Appliance Suite

Name of the Vulnerable Software and Affected Versions: Webwasher CSM Appliance Suite version 5.x Description: The encapsulation script mechanism in the affected software uses case-sensitive detection of malicious tokens. This allows attackers to bypass script detection by using tokens that can be...

5CVSS7.2AI score0.01559EPSS
SaveExploits0References7
NVD
NVD
•added 2005/09/02 11:03 p.m.•29 views

CVE-2005-2771

WRQ Reflection for Secure IT Windows Server 6.0 formerly known as F-Secure SSH server processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be...

10CVSS6.7AI score0.04846EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2005/09/02 4:00 a.m.•45 views

CVE-2005-2771

WRQ Reflection for Secure IT Windows Server 6.0 formerly known as F-Secure SSH server processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be...

6.7AI score0.04846EPSS
SaveExploits0References4
CVE
CVE
•added 2005/09/02 4:00 a.m.•88 views

CVE-2005-2771

CVE-2005-2771 affects AttachmateWRQ Reflection for Secure IT Server (Windows) prior to 6.0 Build 24. The issue arises because access/deny lists are evaluated case-sensitively in vulnerable versions, whereas earlier versions were case-insensitive, potentially allowing login to accounts that should...

10CVSS6.7AI score0.04846EPSS
SaveExploits0References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/02 12:00 a.m.•7 views

CVE-2005-2771: Undefined Security Weakness

WRQ Reflection for Secure IT Windows Server 6.0 formerly known as F-Secure SSH server processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be...

10CVSS5.8AI score0.04846EPSS
SaveExploits0References1
CERT
CERT
•added 2005/08/31 12:00 a.m.•24 views

Reflection for Secure IT Windows Server 6.0 changed case sensitivity of allow and deny lists

Overview Reflection for Secure IT Windows Server version 6.0 uses different case-sensitivity in evaluating the allow and deny lists as previous versions, potentionally allowing unintended access. Description Reflection for Secure IT Windows Server version 6.0, an SSH server from WRQ formerly know...

6.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2005/08/05 4:00 a.m.•40 views

CVE-2002-2119

Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing...

9.6AI score0.02665EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/05 12:00 a.m.•7 views

CVE-2002-2119: Improper Handling of Case Sensitivity

Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing...

9.8CVSS5.8AI score0.02665EPSS
SaveExploits0References2
CVE
CVE
•added 2005/07/17 4:00 a.m.•58 views

CVE-2004-2214

The affected component is the Mbedthis AppWeb HTTP server, with versions prior to 1.1.3 vulnerable. The issue allows remote attackers to bypass access restrictions by a URI containing mixed-case characters. Remediation: upgrade to version 1.1.3 or later. No exploit details are provided in the sou...

9.8CVSS7.1AI score0.02696EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2005/07/17 4:00 a.m.•28 views

CVE-2004-2214

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters...

9.4AI score0.02696EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/17 12:00 a.m.•7 views

CVE-2004-2214: Improper Handling of Case Sensitivity

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters...

9.8CVSS5.8AI score0.02696EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2005/07/14 5:48 p.m.•42 views

Moderate: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating system...

9.8CVSS5.7AI score0.02435EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
•added 2005/07/14 5:48 p.m.•26 views

security flaw

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS5.8AI score0.02072EPSS
SaveExploits0References4
CVE
CVE
•added 2005/07/05 4:00 a.m.•114 views

CVE-2004-2154

CVE-2004-2154 affects CUPS prior to 1.1.21rc1, where a Location directive in cupsd.conf is treated as case sensitive. This allows bypassing ACLs by using a printer name whose capitalization differs from that in the directive, enabling unauthorized access to printers. The issue is propagated acros...

9.8CVSS9.3AI score0.02072EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
•added 2005/07/05 4:00 a.m.•50 views

CVE-2004-2154

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS6.2AI score0.02072EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/05 12:00 a.m.•6 views

CVE-2004-2154: Improper Handling of Case Sensitivity

CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...

9.8CVSS5.8AI score0.02072EPSS
SaveExploits0References3
Rows per page
Query Builder