CVE-2004-1714

CVE-2004-1714 affects BlackICE PC Protection and Server Protection. The issue arises from installation of firewall.ini, blackice.ini, sigs.ini, and protect.ini with Everyone Full Control permissions, enabling a local attacker to crash the service or modify configuration by editing firewall.ini (e...

CVE-2004-1714: Incorrect Permission Assignment for Critical Resource

BlackICE PC Protection and Server Protection installs 1 firewall.ini, 2 blackice.ini, 3 sigs.ini and 4 protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service crash or modify configuration, as demonstrated by modifying firewall.ini to contain a...

CVE-2002-1184

The CVE-2002-1184 entry describes that the Windows 2000 system root folder has default Everyone:F permissions and is searched during login or program launch, enabling privilege escalation via Trojan horse programs. Affected software: Microsoft Windows 2000 (system root folder permissions in the s...

CVE-2002-1504

Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...

CVE-2002-1504

This CVE-2002-1504 entry pertains to WebServer 4 Everyone 1.22 and describes a directory traversal vulnerability where remote attackers can read arbitrary files through URL dot-dot backslash sequences ("..\"). The described root cause is improper normalization of path traversal in user-supplied U...

CVE-2002-1504: Undefined Security Weakness

Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a URL...

WebServer 4 Everyone Host Field Header Buffer Overflow

The remote web server is running a version of WebServer 4 Everyone that crashes when it receives a request for a long filename 2000 bytes and the Host request header is set to '127.0.0.1'. C Tenable Network Security, Inc. Some vulnerable servers: WebServer 4 Everyone v1.28 References: From:"Tamer...

[SecurityOffice] Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability -- - -- Type Denial of Service - -- Release Date October 23, 2002 - -- Product / Vendor Web Server 4 Everyone is an Internet and Intranet server that supports HTTP Services. We...

iDEFENSE Security Advisory 10.15.02: DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.15.02: http://www.idefense.com/advisory/10.15.02.txt DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone October 15, 2002 I. BACKGROUND RadioBird Software's WebServer 4 Everyone is a free "Powerful,...

advisory

----------- UkR security team advisory ------------ WebServer 4 Everyone directory traversal bug ----------------------------------------------------- Name: WebServer 4 Everyone directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: WebServer 4...

CVE-2000-1164: Undefined Security Weakness

WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...

CVE-2000-1106: Undefined Security Weakness

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs...