7401 matches found
aass_patch.txt
--- aass-old.c Mon Jul 26 20:45:46 1999 +++ aass.c Mon Jul 26 21:54:47 1999 @@ -1,5 +1,5 @@ / - The AntiAntiSniffer Sniffer by Mike Perry + The AntiAntiSniffer Sniffer v0.2 by Mike Perry To all my friends, coworkers, and associates who thought I knew better than to do something like this, please...
frame.spoof.txt
Date: Thu, 18 Feb 1999 10:36:49 PST From: Robert Thomas To: [email protected] Subject: Re: Netscape Communicator window spoofing bug -Junk deleted- This was reported back in the November, December time frame by secureexperts.com as a frame spoof bug. MS came up with a lame patch for IE that...
msie.5.dhtml.cuartango.txt
Date: Wed, 24 Mar 1999 12:11:09 +0100 From: Juan Carlos Garcia Cuartango To: [email protected] Subject: IE 5 security vulnerabilities Greetings, Microsoft delivers with IE 5 an Active X control called "DHTML Edit control Safe for Scripting for IE 5". In my opinion this control IS N...
ms-frame-spoof.txt
From: Microsoft Product Security Notification Service mailto:[email protected] On Behalf Of Microsoft Product Security Sent: Wednesday, December 23, 1998 9:51 AM To: [email protected] Subject: Microsoft Security Bulletin MS98-020 The following is a...
msie.5.0-0.001.percent.txt
Date: Fri, 9 Apr 1999 07:15:12 +0300 From: Georgi Guninski To: [email protected] Subject: IE 5.0 security vulnerabilities - %01 bug again There is a security bug in Internet Explorer 5.0 which circumvents "Cross-frame security" and opens several security holes. This is a modification of the "%...
defeat.solaris.nonexec.stack.txt
Hi, I've recently been playing around with bypassing the non-executable stack protection that Solaris 2.6 provides. I'm referring to the mechanism that you control with the noexecuserstack option in /etc/system. I've found it's quite possible to bypass this protection, using methods described...
msie4.01-window-spoof.txt
Guninski's IE 4 window spoofing. http://www.geocities.com/ResearchTriangle/1711/read4.html There is a bug in Internet Explorer 4.01 patched which allows "window spoofing". The problem is: if you add '%01someURL' after the URL, IE thinks that the document is loaded from the domain of 'someURL'. Th...
bmc.patrol.agent.txt
Date: Fri, 9 Apr 1999 12:46:33 +0200 From: fcosta To: [email protected] Subject: Patrol security bugs / / / / / / Security Department / / / Tel : +33 01 41 91 39 00 / / // / Fax : +33 01 41 91 39 99 / / / Patrol Security bugs report PROBLEM: The PATROL management software from BMC SOFTWARE has...
msie4-autoexec.bat-tdc.txt
Guninski's IE 4 reading AUTOEXEC.BAT. There is a bug in Internet Explorer 4.x patched which allows reading local files and sending them to an arbitrary server. The problem is: if you add '%01someURL' after the an about: URL, IE thinks that the document is loaded from the domain of 'someURL'. This...
msie.5.0.javascript.txt
Date: Fri, 19 Mar 1999 11:46:01 +0100 From: Most Psychoid To: [email protected] Subject: IE5 - same vulnerabilities, only some fixed Hello, The new Microsoft Internet Explorer 5 I checked Version: 5.00.0910.1309 still allows Frame Spoofing and reading of local Files as described by Georgi...
Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access
Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access source: https://www.securityfocus.com/bid/116/info Vulnerabilities in an ActiveX control distributed with Internet Explorer 5 and available for Internet Explorer 4 allow malicous web sites to steal local...
Microsoft Internet Explorer 4/5 - DHTML Edit ActiveX Control File Stealing / Cross Frame Access
source: https://www.securityfocus.com/bid/116/info Vulnerabilities in an ActiveX control distributed with Internet Explorer 5 and available for Internet Explorer 4 allow malicous web sites to steal local files and to bypass cross-frame security rules. The DHTML Edit Control Safe for Scripting...
CVE-1999-0801
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames...
Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access
Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access source: https://www.securityfocus.com/bid/197/info On January 28, 1999, Georgi Guninski originally reported a vulnerability in Internet Explorer 4.x. Internet Explorer 4.x's implentation of Cross-frame security could be bypassed ...
Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access
source: https://www.securityfocus.com/bid/197/info On January 28, 1999, Georgi Guninski originally reported a vulnerability in Internet Explorer 4.x. Internet Explorer 4.x's implentation of Cross-frame security could be bypassed if "%01" is appended to an arbitrary URL. If the specially malformed...
BNC 2.2.4/2.4.6/2.4.8 - IRC Proxy Buffer Overflow (1)
/ source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, the excessive data copied onto the...
CVE-1999-0869
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing...
CVE-1999-0871
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability...
Exim Buffer 1.6.21.6.51 - Local Overflow
Exim Buffer 1.6.21.6.51 - Local Overflow / source: https://www.securityfocus.com/bid/1859/info A potential local root yielding buffer overflow vulnerability exists in Exim mail client version 1.62. A buffer used in processing filenames of message attachments can be overflowed by a...
Solaris 2.5.1 - ffbconfig Local Privilege Escalation
Solaris 2.5.1 - ffbconfig Local Privilege Escalation / source: https://www.securityfocus.com/bid/202/info The ffbconfig program is used to configure the Creator Fast Frame Buffer FFB Graphics Accelerator, which is a component of the FFB Configuration Software Package SUNWffbcf. A buffer overflow...