970 matches found
Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun
Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun source: https://www.securityfocus.com/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from...
ICQ Lite weak permissions
During installation Interactive Users: Full Control permission is added to executables directory...
ChiTeX/ChiLaTeX unsafe set-user-id root
Niels Heinen reports that ChiTeX installs set-user-id root executables that invoked system3 without setting up the environment, trivially allowing local root compromise...
Windows NT/2000/XP 16 bit executables protection bypass
16 bit application may be launched from another 16 bit application without have execution right...
CVE-2002-0077
Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable...
Дырка в eudora (embedded executables)
Возможно встроить в письмо исполняемый файл который будет выполнен без предупреждения...
Проблемы с HTT-фолдерами в Windows
Недобросовестный оператор Web-узла может заставить пользователя подключиться к своему ресурсу по UNC-имени, при этом если допускается вид папок как Web0-фолдеров, то будет выполнены команды из Folder.htt, в т.ч. могут быть запущены исполняемые файлы...
fcheck.txt
The short explanation: fcheck is a file integrity checker written in perl. It can send warnings to syslog via an external program such as logger1. Because it calls system with a scalar argument, a malicious user can cause it to execute programs by creating files with shell metacharacters in their...
Microsoft Zero Administration Kit (ZAK) 1.0 / Office97 - Backdoor Access
source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and system functions. In an instance where the end-user is not allowed to...
