1631 matches found
Apache 1.3 - Artificially Long Slash Path Directory Listing (1)
source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system an...
Apache 1.3 - Artificially Long Slash Path Directory Listing (4)
source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system an...
CVE-2000-0942
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting CSS attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability...
CVE-2000-0942
CVE-2000-0942 affects the CiWebHitsFile component of Microsoft Indexing Services for Windows 2000. The vulnerability allows remote attackers to perform a cross-site scripting (XSS) attack via a CiRestriction parameter in a .htw request. The NVD/connected records confirm the impact as a partial co...
CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...
Security Bulletin MS00-098
====================================================================== Issue: ActiveX control in Indexing Services could allow web application to read file properties Date: 19 December 2000 Affected Software: Index Server 2.0 ships in Windows NT 4.0 Option Pack; Indexing Services 3.0 ships in...
Проблема с ActiveX в Microsoft Indexing Services
Через ActiveX возможно получить список и аттрибуты файлов...
CVE-2000-1105
The CVE-2000-1105 vulnerability relates to the ixsso.query ActiveX control, which is incorrectly marked safe-for-scripting. CERT details show that Index Server 2.0 and Indexing Service 3.0 expose a web-accessible interface allowing remote attackers to enumerate local files on a Windows 2000 syste...
CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...
CVE-2000-0942
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting CSS attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability...
guninski27.txt
Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...
Еще одна дырка в Inexing Service из Windows 2000 (ixsso.query ActiveX)
При включенной службе Indexing Service ActiveX-компанент разрешенный для использования через Web позволяет провести поиск по локальным файлам...
IE 5.x Win2000 Indexing service vulnerability
Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...
Microsoft Indexing Service (Windows 2000) - File Verification
Microsoft Indexing Service Windows 2000 - File Verification Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not...
Microsoft Indexing Service (Windows 2000) - File Verification
Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or distribute parts of it without...
Security Bulletin (MS00-084)
Microsoft Security Bulletin MS00-084 - -------------------------------------- Patch Available for "Indexing Services Cross Site Scripting" Vulnerability Originally posted: November 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr...
Microsoft Indexing Service (Windows 2000NT 4.0) - .htw Cross-Site Scripting
Microsoft Indexing Service Windows 2000NT 4.0 - .htw Cross-Site Scripting source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly...
Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting
source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser or HTML compliant e-mail client,...
CVE-2000-0236
CVE-2000-0236 affects Netscape Enterprise Server (and related Web Publisher components) where enabling Directory Indexing allows unauthenticated remote attackers to enumerate server directories via published tags such as ?wp-ver-info and ?wp-cs-dump . The vulnerability is triggered by the Web Pub...