5018 matches found
CVE-2002-0676
Summary: CVE-2002-0676 refers to SoftwareUpdate for MacOS 10.1.x, which reportedly downloads updates without authentication. This could allow an attacker to impersonate the Apple update server via DNS spoofing or cache poisoning and deliver Trojan Horse updates, enabling arbitrary code execution ...
CVE-2002-0024
CVE-2002-0024 affects Internet Explorer 5.01, 5.5 and 6.0. The issue allows an attacker to abuse Content-Disposition and Content-Type HTML headers to alter how a downloaded file’s name is displayed, potentially deceiving users into opening unsafe files. Exploitation details are not provided in th...
CVE-2002-0722
Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue box to trick users into thinking that the file type is safe to download, aka "File Origin Spoofing."...
Advisory: File disclosure in DB4Web
Guardeonic Solutions AG www.guardeonic.com Security Advisory 01-2002 Advisory Name: DB4Web R File Disclosure Release Date: 09/17/02 Affected Product: DB4Web R Application Server Platform: Linux, nix, MS Windows Version: Unknown Severity: A DB4Web component allows files on the server to be...
PT-2002-1697 · Pingtel · Pingtel Xpressa
Name of the Vulnerable Software and Affected Versions: Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4 Description: The issue allows remote attackers to install Trojan horse applications via DNS spoofing because the phone downloads applications from a web site but...
CVE-2001-0720
Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled...
sr.pl
Hi. Checkpoint Firewall-1 makes use of a piece of software called SecureRemote to create encrypted sessions between users and FW-1 modules. Before remote users are able to communicate with internal hosts, a network topology of the protected network is downloaded to the client. While newer version...
Vulnerabilities in CrushFTP Server
----- Begin Hush Signed Message from [email protected] ----- Vulnerabilities in CrushFTP Server Overview CrushFTP Server 2.1.4 is a java ftp server available from http://www.crushftp.com. Multiple vulnerabilities exist which allow users to change directories outside of the ftp root and downlo...
AGAIN: Tested on Windows 98 with 'free' Opera 5.02 Build 856a (No Java Runtime Environment installed)
Thursday, 19 April, 2001 There is an interesting oddity with the 'free' Opera 5.02 Build 856a No Java Runtime Environment installed on Windows 98 with downloading files. In particular .exe. While the array of file type associations and instructions what to do with them is wide, the instruction se...
Vulnerability in FtpXQ Server
----- Begin Hush Signed Message from [email protected] ----- Vulnerability in FtpXQ Server Overview FtpXQ Server 2.0.93 is an ftp server available from http://www.datawizard.net and http://www.download.com. A vulnerability exists which allows an attacker to download files outside the ftp root...
Дырка в My Getright (server skins)
С сервера можно загрузить любые файлы на компьютер клиента в качестве скинов...
CVE-2000-0400
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post...
Microsoft Active Movie Control 1.0 - Filetype
Microsoft Active Movie Control 1.0 - Filetype source: https://www.securityfocus.com/bid/1221/info The Microsoft Active Movie Control a multimedia ActiveX control will download files of any type specified in the control parameters in an HTML document, regardless of whether or not they are a valid...
(без имени)
Hi Bugtraq people, This is a a copy of the mail I send to AVM about the Securtity Bugs in Ken! ISDN Proxy Software. eAX --------------------------------------------------------------- Dear AVM Team, I found two serious security bugs in your internet/isdn proxy software AVM Ken!, and I think I...
CVE-2000-0036: Undefined Security Weakness
Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability...
ex_urllive.txt
URL Live! 1.0 WebServer for Windows95/98/NT which is released by Pacific Software Publishing, Inc. http://www.urllive.com/ also has a "../" security problem, any users can download any files on the victim host. example: http://www.xxx.yy.jp/../../../../config.sys...
pIRCh-dcc.txt
Date: Thu, 12 Nov 1998 11:20:56 -0600 From: "[email protected]" To: [email protected] Subject: Old IRC Client bug Re-Applied If this has already been announced, well, screw me. Problem: The IRC Internet Relay Chat Client, pIRCh automatically assigns your main pirch directory to where DCC...
