5462 matches found
CVE-2000-0335
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...
piranha default password/exploit
Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
CVE-2000-0086
The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...
CVE-1999-0600
A CVE-1999-0600 entry concerns a network intrusion detection system (IDS) that does not verify the checksum on a packet. The connected Red Hat, CVE, NVD, and CVE List records reiterate the same description, but do not specify affected products, versions, or a concrete root cause beyond missing ch...
CVE-1999-0913
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...
CVE-1999-0913
The CVE-1999-0913 entry concerns the dfire.cgi script in Dragon-Fire IDS, where remote users can trigger command execution by supplying shell metacharacters. This is a remote, unauthenticated exposure (attack vector: network) with high impact on confidentiality, integrity, and availability (C/C/I...
CVE-1999-0598
CVE-1999-0598 describes a vulnerability where a network intrusion detection system (IDS) fails to properly handle out-of-order packets, enabling evasion of detection. The connected sources reiterate the issue but do not specify any affected product, vendor, or version in these documents. The CVSS...
CVE-1999-0599
Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0086
Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
CVE-1999-0024
DNS cache poisoning via BIND, by predictable query IDs...
microsoft.privacy.issue.txt
Date: Tue, 11 May 1999 21:55:22 -0600 MDT From: cult hero To: InfoSec News Subject: ISN Everywhere your MAC address shows up Forwarded From: MICROSOFT'S HEAVY HAND IN THE COOKIE JAR A special report from YEOW - Barry Simon. See the Woody's Office Watch discussion and details on the Office 97...
CVE-1999-0913
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...
Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution
source: https://www.securityfocus.com/bid/564/info The Dragon-Fire IDS remote web interface under version 1.0 has an insecure CGI script which allows for users to remotely execute commands as the user nobody. This could lead to a remote compromise of the system running Dragon-Fire. Via the web...
Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution
Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution source: https://www.securityfocus.com/bid/564/info The Dragon-Fire IDS remote web interface under version 1.0 has an insecure CGI script which allows for users to remotely execute commands as the user nobody. This could lead to a...
CVE-1999-0024
DNS cache poisoning via BIND, by predictable query IDs...
: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service
Advisory ID Internal CORE-2006-0714 1. Advisory Information Advisory ID : CORE-2006-0714 Bugtraq ID : 19215 CVE Name : CVE-2006-3942 Title : Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Class : Failure to Handle Exceptional Conditions Remotely Exploitable : Yes Locally Exploitable : Yes...
