8705 matches found
CVE-1999-1443: Undefined Security Weakness
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by 1 using and kill the process using the task manager, 2 booting the system from a separate disk, or 3 interrupting certain processes that execute while...
CVE-2001-0624
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...
CVE-2001-0624
CVE-2001-0624 affects QNX 2.4. A local user can read arbitrary files by directly accessing the FAT disk partition mount point, e.g., /fs-dos. The root cause is an unprotected mount point that exposes file contents to a local user. The impact is partial confidentiality of files. No remediation or ...
MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.2/5.2.1 - File Scanner Malicious Archive Denial of Service
source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content. These products handle compressed files by temporarily unzipping them and scanning their uncompressed...
MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service
MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content...
CVE-2001-0421
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...
CVE-2001-0421: Undefined Security Weakness
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...
Дырка в Lotus Web Server
Исопльзуя URL типа http://TARGETDOMINO/.nsf/../winnt/win.ini можно получить доступ к любому файлу на диске...
CVE-2000-0459
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...
CVE-2000-0459: Undefined Security Weakness
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...
CVE-2000-0030
Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...
CVE-2000-0030
CVE-2000-0030 affects Solaris dmispd dmi_cmd, allowing a local user to exhaust restricted disk space by adding files to /var/dmi/db. The NVD entry lists a MEDIUM base score (5.0) with availability impact and no confidentiality/integrity impact, and indicates a local-access condition despite the C...
CVE-2000-0030: Undefined Security Weakness
Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...
Проблема в SSH с Kerberos
При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...
Infosec.20000617.panda.a
Infosec Security Vulnerability Report No: Infosec.20000617.panda.a ============================ Vulnerability Summary --------------------- Problem: Panda Antivirus has an open console at port 2001 Threat: Remotely run any command on a Netware console Platform: Confirmed on Novell Netware Solutio...
Локальный DoS против FreeBSD
Команда dd if=disc image of=/dev/fd0 приводит к перезагрузке системы, если дискета защищена на запись...
Дырка в Secret Disk
На машинах с несколькими мониторами скринсейвер с паролем, запускающийся при изъятии ключа, запускается только на одном мониторе...
Дырка в kcsd под Linux
kcsd использует внешний shell определяемый переменной SHELL, которая задается пользователем. Таким образом, подменив SHELL можно получить привелегии группы disk, позволяющие менять разрешения любых файлов...
KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable
KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This...