Xitami GSL problems

No description provided...

CVE-2002-0419

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...

HTTP proxy default configurations allow arbitrary TCP connections

Overview Multiple vendors' HTTP proxy services use insecure default configurations that could allow an attacker to make arbitrary TCP connections to internal hosts or to external third-party hosts. Description HTTP proxy services commonly support the HTTP CONNECT method, which is designed to crea...

Login configurations

This plugin provides the username and password credentials for common servers, such as HTTP, FTP, NNTP, POP2, POP3, IMAP, IPMI, and SMB NetBios. Some plugins will use those credentials when needed. If you do not provide the credentials, those plugins will not be able to run. Note that this plugin...

Security Advisory: A Vulnerability in IOS Firewall Feature Set

Cisco Security Advisory: A Vulnerability in IOS Firewall Feature Set Revision 1.0 For Public Release 2001 November 28 08:00 UTC -0800 Summary The IOS Firewall Feature set, also known as Cisco Secure Integrated Software, also known as Context Based Access Control, and introduced in IOS version...

Internet Explorer allows reading of local files by remote webpages

Summary ------- There is a vulnerability in MS Internet Explorer that allows any webpage or HTML email to read arbitrary local files. This bug may also lead to remote command execution. Vulnerable versions ------------------- All versions of IE seem to be affected. The following configurations ha...

[RHSA-2001:142-15] kernel 2.2 and 2.4: syncookie vulnerability

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: kernel 2.2 and 2.4: syncookie vulnerability Advisory ID: RHSA-2001:142-15 Issue date: 2001-10-26 Updated on: 2001-11-02 Product: Red Hat Linux Keywords: syncookie security kerne...

CVE-2001-0077

CVE-2001-0077 concerns the clustmon service in Sun Cluster 2.x, which does not require authentication. This allows remote attackers to access sensitive information such as system logs and cluster configurations. The available connected documents confirm the vulnerability details (unauthenticated ...

Important: Red Hat Security Advisory: Kernel

A security hole has been found that does not affect the default configuration of Red Hat Linux, but it can affect some custom configurations of Red Hat Linux 7.1. The bug is specific to the Linux 2.4 kernel series. Aside from the fix, countless bugfixes have been applied to this kernel as a resul...

CVE-2000-0313

Technical details about CVE-2000-0313 are not provided in the connected documents. The initial description mentions an OpenBSD 2.6 local interface-media change issue, but no concrete product/version specifics or remediation are included here. Monitor for updates.

CVE-2000-0313

Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations...

CVE-2000-0313

Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations...

WU-FTPD 2.6.0 - Remote Format Strings

/ 12:40 11/10/00: Tool for either attack or defense within an information warfare setting. Rather, it is a small program demonstrating proof of concept. Default values for solaris 2.8 and inetd. If you are not the intended recipient, or a person responsible for delivering it to the intended...

hybrid-ircd

format string problems in hybrid-ircd. some fixed need valid domain, and in-addr.arpa. bind8, configure check-names warn; make host nnnn.host.com in a 1.2.3.4 4.3.2.1.in-addr.arpa in ptr nnnn.host.com connect to comstud CS server because allows connect 2nd client to hybrid server, join channel...

MS IE5 + ftp proxy

Problem: IE5 doesn't use proxy for FTP connection if option "Enable folder view for FTP sites" is checked. This option is checked by default. Configuration: tested in 2 configurations: 1. Windows NT 4.0 wrkst + SP5 + IE5.0 2. Windows NT 4.0 wrkst + SP6a + IE5.01 both has a problems. There is no...

FreeBSD-SA-00:30.openssh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:30 Security Advisory FreeBSD, Inc. Topic: OpenSSH UseLogin directive permits remote root access Category: core Module: openssh Announced: 2000-07-05 Credits: Markus Fried...

Remote DOS in linux rpc.lockd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, all... Found what appears to be a remote DOS in the linux kernel code for NFS lockd. Only requires a restart of the service, but the port stays bound in a iclosewait state for what appears to be an indefinite time. I have only tested this in...

CVE-2000-0212

InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information...

sshd.locked-accts.txt

NAME sshd-restricted-users-incorrect-configuration AUTHOR Marc SCHAEFER Andreas Trottmann THANKS OpenBSD security team VERSION $Id: sshd-restricted-users-incorrect-configuration,v 1.2 2000/01/25 10:27:56 schaefer Exp $ ABSTRACT In some cases where a system must be configured so that specific user...

CVE-2000-0119

The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection...