Дыра в AllManage

Возможно обойти авторизацию пользователя, получить доступ к административному паролю и конфигурационным файлам...

citrix.winframe.txt

Date: Fri, 28 May 1999 12:26:59 -0700 From: David Terrell To: [email protected] Subject: Citrix Winframe client for Linux presumably this holds true for the other unix clients as well, but all I have is linux to test on The Citrix Winframe linux client used for accessing Winframe and Windows N...

Netscape Enterprise Server 3.513.6 - JHTML View Source

Netscape Enterprise Server 3.513.6 - JHTML View Source source: https://www.securityfocus.com/bid/559/info Netscape Enterprise Server 3.51 and above includes a search engine by default. The results it generates can be tailored using various configuration files, and one of the options is whether or...

Netscape Enterprise Server 3.51/3.6 - JHTML View Source

source: https://www.securityfocus.com/bid/559/info Netscape Enterprise Server 3.51 and above includes a search engine by default. The results it generates can be tailored using various configuration files, and one of the options is whether or not the full text of a resultant page is displayed. Th...

Majordomo 1.891.90 - lists Command Execution

Majordomo 1.891.90 - lists Command Execution source: https://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to...

Majordomo 1.89/1.90 - 'lists' Command Execution

source: https://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute arbitrary commands with the privileges ...

ROS-2-2182

2.2182 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...