Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3)

Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-7 Description: Tomcat multiple sample files display webroot location on default configuration on request. Date: 8/1/2002 Application: Apache Tomcat java server v3.23, 3.24. Platform: Linux/Unix Severity: Remote attackers can obta...

CVE-2002-0255

The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router...

Apache Tomcat 3.2.3/3.2.4 - Example Files Web Root Full Path Disclosure

source: https://www.securityfocus.com/bid/4877/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. When Apache Tomcat is installed with a default configuration, several example files are also installed. When some of these example files are request...

TCP connection establishing via Cisco Transparent Cache Engine

It's possible to establish TCP connection via transparent proxy in default configuration...

Unauthorized acces in SAP R/3

It's possible to obtain administrative access to database in default configuration...

phpGroupWare 0.9.13 - Debian Package Configuration

phpGroupWare 0.9.13 - Debian Package Configuration source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecu...

Unauthorized access in popper_mod

There is no limitation for access to administration interface in default configuration...

Unauthorized SNMP access in Foundry Networks EdgeIron 4802F

Any SNMP community has read/write access in default configuration...

CVE-2001-0373

Technical details about CVE-2001-0373 are not publicly provided in the supplied documents; only the general description is present. Monitor for updates.

CVE-2001-1371

The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager...

Vulnerabilty in PaintBBS v1.2

PaintBBS Server v1.2 Advisory Author: John Bissell A.K.A. HighT1mes Vulnerable: PaintBBS Server Ver.1.2 Build 010514 Impact: PaintBBS Server 0wn3d Release Date: January, 22, 2002 Contact: [email protected] Vendor Homepage: http://www.ax.sakura.ne.jp/aotama/...

CVE-2001-0821

DCShop 1.002 beta default configuration exposes sensitive files in the cgi-bin directory (orders.txt, auth_user_file.txt), allowing remote reads via HTTP GET. Connected OpenVAS entry corroborates a vulnerable DCShop CGI release and suggests access to admin passwords, current/pending transactions,...

Beck GmbH IPC@Chip does not adequately validate user input thereby disclosing sensitive network data via crafted URL

Overview An insecure default configuration in the Beck IPC@CHIP allows an intruder to obtain priviledged system information. Description The Beck IPC@CHIP is a single chip embedded webserver. The Beck IPC@CHIP ships with a cgi script named "ChipCfg". Using a specially crafted url, an attacker can...

CVE-1999-1054

The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command...

Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default

Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...

Обход checkpoint через RDP-пакеты (protection bypass)

В конфигурации по-умолчанию пропускаются RDP-пакеты UDP/259...

smbd remote file creation vulnerability

Please hold with approving this one before Monday, if possible. This is a forced release. Author: Michal Zalewski [email protected] Topic: Insufficient parameter validation and unsafe default configuration make numerous systems running samba SMB file sharing daemon vulnerable to remote...

IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution

IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution source: https://www.securityfocus.com/bid/2845/info ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote...

CVE-2000-0869

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method...

CVE-2000-1016

The CVE-2000-1016 entry concerns the default Apache httpd.conf alias on SuSE 6.4 that exposes /usr/doc via /doc/packages, enabling remote read of package documentation and system configuration information. The vulnerability is an information disclosure in the web server configuration, with the af...