Lotus Notes Stored Form Vulnerability

Security Advisory: Lotus Notes Stored Form Vulnerability Date: 8th February 2001 Author: Chris Jones aka dp [email protected] Versions Affected: At present only Lotus Notes v4.6 has been tested ---- Exploit Introduction ------------------------------------------ Due to the design flaws of Lotus Not...

CVE-2000-0844

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen...

McAfee WebShield SMTP 4.5 Multiple Vulnerabilities

The remote WebShield server is subject to two flaws : - It may let mail pass against some filter rules if the attached files names have some strange chars in them - It is possible for an outsider to crash this program and force its reinstallation Nessus did not actually test for these flaws - it...

Exploit for Totalbill...

Totalbill is a complete billing and provisioning system for ISPs, and it's written by Aptis Software www.aptissoftware.com. There is one part of it that sits on your mail and radius servers called Sysgen that listens on a port sometimes 9998, but it usually varies, and it allows the incoming...

Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket

source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the java.net.ServerSocket class to create a listening...

Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket

Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...

bajie.webserver.txt

More junk brought to you by the MDMA Crew Two security flaws in the Bajie Webserver Bajie is a freeware HTTP daemon written in Java and available from TuCows. We found two vulnerabilities in it... The sample Java servlet at /servlet/test/pathInfo/test gives away a real path eg. /www/html or...

ProFTPD Multiple Remote Overflows (palmetto)

The remote ProFTPd server is running a 1.2.0preN version. All the 1.2.0preN versions contain several security flaws that allow an attacker to execute arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10464; scriptversion"1.25";...

Дырка в MiniVend

Классические дырки в демонстрационном web-скрипте...

XFree86: Various nasty libX11 holes

Hi, I'll summarize the impact and recommendations before I paste a mail which goes into technical details of the flaws. SUMMARY ======= Various coding flaws exist in libX11. Whilst this may not sound too serious, it is, for two reasons. They are 1 Various X client programs foolishly have privileg...

HM Software S to Infinity 3.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/1368/info A number of vulnerabilities exist in HM Software S to Infinity, a security access control, desktop lockdown and transparent encryption application. Intended features include restriction of access to folders, files, floppy and CD-ROM drives, etc...

SessionWall-3 Paper + (links to) code

Dear All, The example code which compliments this paper can be found on http://www.phate.net/progs/sw3 Best regards, and enjoy. -cdx -- Design and Implementation Flaws in SessionWall-3 or "Using and Abusing SessionWall-3 with the power of XOR" by Ob1 [email protected] Maelstrom [email protected] Codex...

antisniff latest ("two times fixed") version still exploitable, l0phtl0phe-kid.c

Hi. This email includes personal opinions that might touch the feelings of some persons, but I cannot post this without some anger in my heart, so read on. The story about this bug started some days ago, when someone notified l0pht of a buffer overflow vulnerability in antisniff. Though this...

filemaker.pro5

/off topic: please in the list disable or add filter to your auto-reply/ from:http://www.blueworld.com/blueworld/news/05.01.00-FM5Sec urity.html .../... The precise details of how to exploit these holes is minimized to prevent compromising the integrity of all current Internet-accessible FileMake...

hack-hm-1.1.txt

Title Hotmail Security Alert Hack HM1.1! 5/10/2000 By: Da Hawaiian HaXorS "Give back da aina!" Disclaimer In no event shall Da Hawaiian HaXorS be held liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an...

Microsoft IIS Dangerous Sample Files Detection

Some of the IIS sample files are present. They all contain various security flaws which could allow an attacker to execute arbitrary commands, read arbitrary files or gain valuable information about the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by...

Опубликована очередная сводка уязвимостей ISS

No description provided...

officescan.txt

hi, All of u have certainly seen the possibly general dos attack against OfficeScan just by connecting a client to the port 12345 without sending any TCP FIN packet at the application time-out. After several tests on OfficeScan 3.5, I realized there were numerous other security flaws resulting in...

CVE-2000-0113

The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...

glFTPd 1.17.2 - Code Execution

source: https://www.securityfocus.com/bid/891/info GlFtpd is a popular alternative to the mainstream unix ftp daemons and is currently in wide use on the internet. There are three known serious vulnerabilities in GlFtpd. The first problem is an account which is created by default upon installatio...