CVE-2002-0731

The CVE-2002-0731 entry describes a Cross-site scripting vulnerability in the demonstration scripts for vqServer. The issue arises when an attacker can craft a link with script code in the arguments to demo scripts (e.g., respond.pl), enabling remote script execution in the victim’s browser via s...

CVE-2002-0731

Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl...

More SWF vulnerabilities?

Vulnerable systems: unpatched "standalone Flash players" Macromedia Shockwave Flash player versions before January 2002? Fix: "In response to the discovery of the virus, in January Macromedia released an update to its standalone Flash player that causes the player to ignore the "exec" action."...

CVE-2001-0366: Undefined Security Weakness

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program...

CVE-2001-0372

CVE-2001-0372 affects Akopia Interchange versions 4.5.3 through 4.6.3. The vulnerability arises because the installation of demo stores creates a default group account named ":backup" with no password, enabling a remote attacker to gain administrative access via the demo stores using the accounts...

CVE-2001-0372: Undefined Security Weakness

Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores 1 barry, 2 basic, or 3 construct...

SAP R/3 Web Application Server Demo for Linux: root exploit

Topic: SAP R/3 Web Application Server Demo for Linux: root exploit Module: /usr/sap/WAS/SYS/exe/run/saposcol Announced: 2001-04-29 Affects: WAS demo as released on CeBit Vendor: 1SAP AG, Walldorf, Germany Vendor-Status: informed 2001-04-09 acknoledged 2001-04-10 workaround specified 2001-04-17...

ISC BIND 8.2.x - TSIG Remote Stack Overflow (4)

ISC BIND 8.2.x - TSIG Remote Stack Overflow 4 / This exploit has been fixed and extensive explanation and clarification added. Cleanup done by: Ian Goldberg Jonathan Wilkins NOTE: the default installation of RedHat 6.2 seems to not be affected due to the compiler options. If BIND is built from...

CVE-2000-0903

Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0903

Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. dot dot attack...

Linux news 27.11.00

Alan Cox: Linux kernel 2.4.0test11ac4 Список фиксов довольно внушительный. Интересно, они изменения эти в релиз 2.4.0 войдут? Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-25-001-04-NW-KN fetchmail 5.6.0 Вышла новая версия fetchmail - fetchmail 5.6.0. В данной версии обновлен FAQ и...

cuartango-window.txt

Cuartango Window http://pages.whowhere.com/computers/cuartangojc/cuartangow1.html Affected software Microsoft Internet Explorer 4 Risks Your computer is at risk a malicious VBScript can get full control over your system. The VBScript can de everything : delete files, install viruses, read your...

PT-1999-1083 · Quakenbush · Quakenbush Nt Password Appraiser

Name of the Vulnerable Software and Affected Versions: Quakenbush NT Password Appraiser demo version Description: The issue concerns the transmission of passwords in plaintext over the network. Recommendations: For the demo version of the Quakenbush NT Password Appraiser, consider disabling the...