5116 matches found
ManTrap 1.6.1 - Hidden Process Disclosure
// source: https://www.securityfocus.com/bid/1908/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an attacker who gains access to it. To ensur...
CVE-2000-0712
Linux Intrusion Detection System LIDS 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option...
CVE-2000-0712
Linux Intrusion Detection System LIDS 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option...
CVE-2000-0712
CVE-2000-0712 affects Linux Intrusion Detection System (LIDS) 0.9.7. The issue allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. The provided documents state the affected component and the condition that enables elevation but do not include explicit ...
DOS on RealSecure 3.2
Bulletin : 243 Title: Denial of Service RealSecure Information Date: 8/4/00 Product: Realsecure Company: ISS - Internet Security Systems Issued by: Mуdulo Security Labs Abstract: The Modulo Security Labs Team found during a test program two ways to stop the ISS RealSecure 3.2.x engine. The engine...
LIDS severe bug
Hi. Didn't see a message regarding this one here, so here we go... This is from the Linux Intrusion Detection System LIDS/www.lids.org mailing list. Basically LIDS 0.9.7 for kernel 2.2.16 breaks the system so that every user is acting as uid=0 when the system has been started with /security=0 at...
CVE-2000-0559
The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...
CVE-2000-0559
eTrust Intrusion Detection System formerly SessionWall-3 uses weak encryption XOR to store administrative passwords in the registry, which allows local users to easily decrypt the passwords...
CVE-2000-0559
eTrust Intrusion Detection System formerly SessionWall-3 uses weak encryption XOR to store administrative passwords in the registry, which allows local users to easily decrypt the passwords...
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and...
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption
source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and configure the application's registry settings. Provided that either a remote or...
CVE-1999-0599
A network intrusion detection system IDS does not properly handle packets with improper sequence numbers...
CVE-1999-0600
A network intrusion detection system IDS does not verify the checksum on a packet...
CVE-1999-0602
Technical specifics (affected products/versions, root cause, exploitability and fixes) are not provided in the supplied documents. Monitor Red Hat, NVD and related feeds for updates and confirmed details.
CVE-1999-0601
A network intrusion detection system IDS does not properly handle data within TCP handshake packets...
CVE-1999-0601
CVE-1999-0601 affects a network intrusion detection system (IDS) and is caused by improper handling of data within TCP handshake packets. The public records (NVD, CVE list, Red Hat entry) describe the vulnerability as an IDS failing to process TCP handshake data correctly, with a base CVSS v2.0 s...
CVE-1999-0598
A network intrusion detection system IDS does not properly handle packets that are sent out of order, allowing an attacker to escape detection...
CVE-1999-0602
A network intrusion detection system IDS does not properly reassemble fragmented packets...
CVE-1999-0598
CVE-1999-0598 describes a vulnerability where a network intrusion detection system (IDS) fails to properly handle out-of-order packets, enabling evasion of detection. The connected sources reiterate the issue but do not specify any affected product, vendor, or version in these documents. The CVSS...