[AP] Owl Intranet Engine CSS Bug

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 05/21/2003 homepage: http://sec.angrypacket.com advisory id: 0x0005...

CVE-2003-0341

Cross-site scripting XSS vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field...

Owl browse.php Authentication Bypass

The remote host is using owl intranet engine, an open source file sharing utility written in php. There is a flaw in this application that may allow an attacker to browse files on this host without having to log in. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 13 May 2003...

CVE-2001-0724: Undefined Security Weakness

Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of...

CVE-1999-1087

CVE-1999-1087 affects Internet Explorer 4 where a 32-bit number in a URL (a “dotless IP address”) is treated as the hostname rather than as an IP address. This causes the web page to inherit Local Intranet Zone settings, enabling remote malicious servers to perform unauthorized activities using U...

CVE-1999-1087: Undefined Security Weakness

Internet Explorer 4 treats a 32-bit number "dotless IP address" in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that conta...

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing ------ Risk: POTENTIALLY HIGH. Potentially allowing any possible action on the client machine, including reading any file, placing Trojan code or altering data. The risk depends on the security settings in the 'Intranet zone'...

Проблемы с "бесточечными" адресами в Internet Explorer (protection bypass)

Бесточечные адреса в Internet Explorer считаются относящимися к Intranet-зоне...

Microsoft Internet Explorer 5 - Zone Spoofing (MS01-055)

Microsoft Internet Explorer 5 - Zone Spoofing MS01-055 source: https://www.securityfocus.com/bid/3420/info Microsoft Internet Explorer contains a security-setting feature that can be modified according to a user's preferences. These settings control what actions a web site can take on a user's...

Microsoft Internet Explorer 5 - Zone Spoofing (MS01-055)

source: https://www.securityfocus.com/bid/3420/info Microsoft Internet Explorer contains a security-setting feature that can be modified according to a user's preferences. These settings control what actions a web site can take on a user's system. A vulnerability exists in Internet Explorer, whic...

Очередная дырка в IE - DHTMLED AttiveX

Элемент ActiveX позволяет редактирование документов, но не проверяет обращение к DOM, что позволяет прочитать любой локальный документ или документ из Intranet - сети...

Novell BorderManager 3.0 EE - Encoded URL rule bypass

I suspect that this has already been defined, but I cannot find any reference to it. Setting secure areas on an intranet secured by URL rules within bordermanager can be bypassed by changing some of the characters in the URL with -encoded triplets. To access http://home.myintranet.com/secure use...

Centrinity FirstClass 5.77 - Intranet Server Long Header Denial of Service

Centrinity FirstClass 5.77 - Intranet Server Long Header Denial of Service source: https://www.securityfocus.com/bid/1421/info If an E-mail containing an excessively long To: field in the header 1.5 MB is processed by First Class Intranet Services FCIS, a Denial of Service can occur...

Centrinity FirstClass 5.77 - Intranet Server Long Header Denial of Service

source: https://www.securityfocus.com/bid/1421/info If an E-mail containing an excessively long To: field in the header 1.5 MB is processed by First Class Intranet Services FCIS, a Denial of Service can occur...

AltaVista Intranet Search CGI query Traversal Arbitrary File Access

It is possible to read the content of any files on the remote host such as your configuration files or other sensitive data by using the Altavista Intranet Search service, and performing the request: %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-1999-1087

Internet Explorer 4 treats a 32-bit number "dotless IP address" in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that conta...

msie.zone.confusion.txt

Date: Fri, 5 Mar 1999 21:53:18 -0500 From: Jim Paris To: [email protected] Subject: More Internet Explorer zone confusion Even after the patch described in Microsoft Security Bulletin MS98-016 http://www.microsoft.com/security/bulletins/ms98-016.asp, IE4 still has big problems with...

tcpdump 3.4 - Protocol Four Zero Header Length

tcpdump 3.4 - Protocol Four Zero Header Length // source: https://www.securityfocus.com/bid/313/info A vulnerability in tcpdump causes it to enter an infinite loop within the procedure ipprint from the file printip.c when it receives a packet with IP protocol number four and a zero header length...