6572 matches found
CVE-2000-1177
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother BB before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter...
CVE-2000-0335
The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...
CVE-2000-0335: Undefined Security Weakness
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...
DoS против NetProwler
пакет с IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH приводит к краху IDS при включеной сигнатуре Man-in-the-Middle...
RFP2K05.txt
---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...
Уязвимость в BlackICE IDS
Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...
CVE-2000-0335
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...
piranha default password/exploit
Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
CVE-1999-0598
CVE-1999-0598 describes a vulnerability where a network intrusion detection system (IDS) fails to properly handle out-of-order packets, enabling evasion of detection. The connected sources reiterate the issue but do not specify any affected product, vendor, or version in these documents. The CVSS...
CVE-1999-0599
Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0913
The CVE-1999-0913 entry concerns the dfire.cgi script in Dragon-Fire IDS, where remote users can trigger command execution by supplying shell metacharacters. This is a remote, unauthenticated exposure (attack vector: network) with high impact on confidentiality, integrity, and availability (C/C/I...
CVE-1999-0600
A CVE-1999-0600 entry concerns a network intrusion detection system (IDS) that does not verify the checksum on a packet. The connected Red Hat, CVE, NVD, and CVE List records reiterate the same description, but do not specify affected products, versions, or a concrete root cause beyond missing ch...
CVE-1999-0913
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...
CVE-2000-0086
The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...
CVE-1999-0913: Undefined Security Weakness
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters...
CVE-2000-0086
Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...