CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

Re: Squid doesn't quote urls in error messages.

Hello Lincoln Yeoh, 27.10.00 13:47, you wrote: Squid doesn't quote urls in error messages.; L I noticed that Squid 2.3.STABLE4 doesn't quote urls in error L messages. skip L I haven't really tried it myself, and so I can't confirm if it really works L that's why it's in VULN-DEV ; . I can confirm...

CVE-2000-0759

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path...

CVE-2000-0601

LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages...

CVE-2000-0640

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. dot dot attack, which provides different error messages depending on whether the file exists or not...

CVE-2000-0746

Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting CSS attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those...

Multiple QNX Voyager Issues

Tested Versions: QNX Voyager 2.01B Tested Distributions: QNX Demo Disk Modem v405 QNX Demo Disk Network v405 Distributor: QNX Software Systems Limited http://www.qnx.com Distributor Status: No response after 3 weeks Intro: QNX is a whole operating system aimed at the embedded computing market. Th...

DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure

DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure source: https://www.securityfocus.com/bid/1452/info Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messag...

DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure

source: https://www.securityfocus.com/bid/1452/info Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messages it is able to determine if the file requested exists. The error...

CVE-2000-0601

LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages...

FrontPage 2000 / IIS 4.0/5.0 - Server Extensions Full Path Disclosure

source: https://www.securityfocus.com/bid/1174/info The local path of a HTML, HTM, ASP, or SHTML file can be disclosed in Microsoft IIS 4.0/5.0 / Frontpage Server Extensions 1.1 and prior. Passing a path to a non-existent file to the shtml.exe or shtml.dll depending on platform program will displ...

FrontPage 98Personal WebServer 1.0 Personal Web Server 2.0 - htimage.exe File Existence Disclosure

FrontPage 98Personal WebServer 1.0 Personal Web Server 2.0 - htimage.exe File Existence Disclosure source: https://www.securityfocus.com/bid/1141/info htimage.exe can be used to determine if a specified path and filename exists on the target host or not. The specified path must be on the same...

CVE-1999-0990

Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system...

CVE-1999-0212

Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server...

CVE-1999-0990

Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system...

PT-1999-1510 · Gnome · Gdm

Name of the Vulnerable Software and Affected Versions: gdm affected versions not specified Description: The issue allows an attacker to identify valid users on a system through error messages generated by gdm when the VerboseAuth setting is enabled. Recommendations: At the moment, there is no...

hp5crash.txt

http://www.rootshell.com/ Date: Wed, 6 Jan 1999 14:59:21 -0800 From: [email protected] Subject: Another way to crash HP printers A few months ago, I reported that you could crash HP 5m printers by doing a multivarible SNMP query on the interpreters table. I have since found a similar problem tha...

Microsoft IIS 5.0 - User Existence Disclosure (2)

Microsoft IIS 5.0 - User Existence Disclosure 2 source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS wil...

Microsoft IIS 5.0 - User Existence Disclosure (1)

Microsoft IIS 5.0 - User Existence Disclosure 1 source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS wil...

CVE-1999-0212

Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server...