1683 matches found
CVE-2005-1716
TOPo 2.2 2.2.178 stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses...
CVE-2004-2079
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user...
HP-UX PHNE_21261 : HPSBUX0004-112 Sec. Vulnerability with VirtualVault (rev.1)
s700800 11.04 VVOS VVOS/Net Cumulative Patch : Programs running on the VirtualVault may receive data inappropriately via an interface configured with aliased IP addresses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from...
CVE-2004-2095
Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are being simulated by Honeyd...
CVE-2003-0993
CVE-2003-0993 concerns Apache 1.3.x mod_access on big-endian 64-bit systems. The issue arises because Allow/Deny rules that specify IP addresses without a netmask are not parsed correctly, potentially allowing remote attackers to bypass access restrictions. Multiple OpenVAS entries and vendor adv...
CVE-2003-0993: Undefined Security Weakness
modaccess in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions...
DistCC Detection
The remote host is running distcc, a distributed GCC compiler. distcc allows a user to use the resources several hosts to compile his programs more quickly. As distcc allows anyone to execute arbitrary commands on the remote host, it should be configured to only accept connections from a restrict...
Exclude top-level domain wildcard hosts
This host has an IP address known to be a wildcard record for a top- level domain TLD or for a host within the 'nessus.org' domain. It has been blacklisted and will not be scanned. C Tenable Network Security, Inc. Known top level domain wildcards, from http://www.imperialviolet.org/dnsfix.html .C...
CVE-2003-0757
Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet...
CVE-2003-0757
CVE-2003-0757 affects Check Point FireWall-1 versions 4.0 and 4.1 prior to SP5. The issue allows remote attackers to obtain the IP addresses of internal interfaces by issuing certain SecuRemote requests to TCP ports 256 or 264 , with the IPs leaked in a reply packet. Publicly available sources (N...
CVE-2001-0724: Undefined Security Weakness
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of...
CVE-2002-1535
CVE-2002-1535 affects Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2. An attacker can discover internal host IP addresses by sending a CONNECT request and observing differing error messages depending on host presence, implying partial disclosure of internal topology. Th...
CVE-2002-2058
TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...
Domain Name System (DNS) resolver libraries vulnerable to read buffer overflow
Overview DNS stub resolvers from multiple vendors contain a buffer overflow vulnerability. The impact of this vulnerability appears to be limited to denial of service. Description A read buffer overflow vulnerability exists in BIND 4 and BIND 8.2.x stub resolver libraries. Other resolver librarie...
CVE-1999-1233
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...
CVE-2001-0664: Undefined Security Weakness
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."...
CVE-1999-1157: Undefined Security Weakness
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...
CVE-2000-0251
HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...
CVE-2000-0251
HP-UX 11.04 VirtualVault (VVOS) is affected by CVE-2000-0251. The issue involves VVOS sending data to unprivileged processes via an interface that has multiple aliased IP addresses. This exposes sensitive data to unprivileged processes, with the documented impact indicating partial integrity comp...