CVE-2000-0335: Undefined Security Weakness

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...

DoS против NetProwler

пакет с IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH приводит к краху IDS при включеной сигнатуре Man-in-the-Middle...

RFP2K05.txt

---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...

Уязвимость в BlackICE IDS

Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...

CVE-2000-0335

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...

piranha default password/exploit

Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...

CVE-1999-0699

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...

CVE-1999-0913

dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...

CVE-1999-0598

CVE-1999-0598 describes a vulnerability where a network intrusion detection system (IDS) fails to properly handle out-of-order packets, enabling evasion of detection. The connected sources reiterate the issue but do not specify any affected product, vendor, or version in these documents. The CVSS...

CVE-1999-0913

The CVE-1999-0913 entry concerns the dfire.cgi script in Dragon-Fire IDS, where remote users can trigger command execution by supplying shell metacharacters. This is a remote, unauthenticated exposure (attack vector: network) with high impact on confidentiality, integrity, and availability (C/C/I...

CVE-2000-0086

The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...

CVE-1999-0599

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0600

A CVE-1999-0600 entry concerns a network intrusion detection system (IDS) that does not verify the checksum on a packet. The connected Red Hat, CVE, NVD, and CVE List records reiterate the same description, but do not specify affected products, versions, or a concrete root cause beyond missing ch...

CVE-1999-0913: Undefined Security Weakness

dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...

CVE-2000-0086

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...

CVE-1999-0699

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...

CVE-1999-0699: Undefined Security Weakness

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...

CVE-1999-0024

DNS cache poisoning via BIND, by predictable query IDs...

CVE-1999-0024: Undefined Security Weakness

DNS cache poisoning via BIND, by predictable query IDs...

microsoft.privacy.issue.txt

Date: Tue, 11 May 1999 21:55:22 -0600 MDT From: cult hero To: InfoSec News Subject: ISN Everywhere your MAC address shows up Forwarded From: MICROSOFT'S HEAVY HAND IN THE COOKIE JAR A special report from YEOW - Barry Simon. See the Woody's Office Watch discussion and details on the Office 97...