PT-2001-1770 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The SSH protocols 1 and 2 as implemented in OpenSSH have various weaknesses that can allow a remote attacker to obtain sensitive information via sniffing. This includes password lengths or...

webcgi98.txt

The following e-mail was sent to Acadsoft support about a week ago and I have yet recieved a response so I thought it was time to make it public. As I mentioned in the email I felt it was important because various universities use this as a registration utility. Hi, I was playing around with your...

Oracle's ADI 7.1.1.10.1 Major security hole

The version of ADI Application Desktop Integrator 7.1.1.10.1 which was recently shipped with Oracle's Financial Applications version 11.5.3 contains a major security breach. Whenever the software is launched, it creates a file called dbg.txt on the local hard drive on the system which contains in...

Дырка в WEbSphere

При HTTP-запросе в котором указано имя сервера не подходящее ни под один из виртуальных серверов показывается содержимое JSP-страницы...

Огромная дыра в Interbase

В базу вкомпилян универсальный пароль доступа, дающий удаленный доступ с административными привелегиями. Всвязи с тем что Inprise Borland открыл сорсы пароль теперь известе всем желающим в текстовом виде...

PT-2000-1640 · Pccs · Pccs Mysqldatabase Admin Tool Manager

Name of the Vulnerable Software and Affected Versions: PCCS MySQLDatabase Admin Tool Manager versions 1.2.4 and earlier Description: The issue allows remote attackers to obtain sensitive information, such as the administrative password, because the file dbconnect.inc is installed within the web...

Дыркав Aplio Pro

Обратный путь в директориях позволяет обратиться к конфигурационному файлу содержащему пароли в открытом виде...

QSSL Voyager 2.0 1B - Arbitrary File Access

QSSL Voyager 2.0 1B - Arbitrary File Access source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style paths, which will...

[COVERT-2000-06] Initialized Data Overflow in Xlock

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 29, 2000 Initialized Data Overflow in Xlock COVERT-2000-06 o Synopsis An implementation vulnerability in xlock allows global variables in the initialized data section of memory to be...

webcart.cc.txt

Date: Fri, 23 Apr 1999 23:14:31 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data This is my first post to Bugtraq so please bear with me for any errs and/or misconducts. I'd just like to point out, that Webcart is vulnerable too. Here goes: Mountain...

perlshop.cc.txt

Date: Tue, 27 Apr 1999 14:39:47 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data Been doing some more searches for misconfigured webcarts exposing cc-information. Seems like a pandora's box, that just opened. Perlshop is vulnerable too if misconfigured:...

DEBIAN-CVE-1999-0710

The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems...