CHINANSL Security Advisory(CSA-200106)

Topic: JavaServer Web Dev KitJSWDK1.0.1 for win2000 Directory traversal Vulnerability vulnerable: Microsoft Win2000 ЎЎЎЎ+JSWDK1.0.1 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have JSWDK 1.0.1 installed.The vulnerabili...

CVE-2000-1099

CVE-2000-1099 affects the Java Runtime Environment in JDK 1.2.2_05 and earlier . The vulnerability allows an untrusted Java class to call into a disallowed class, potentially allowing sandbox escape and unauthorized activities. The available documents do not provide a specific patch version or re...

CVE-2000-1099

Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...

WDK_v1.0.vuln.txt

../ bugs in the Java Web server Development kit built in servlet engine http://localhost:8080/../../../../etc/passwd below is my version info. JavaServertm WDK v1.0 EA elguapo@localhost elguapo$ telnet localhost 8080 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^'...

CVE-1999-0142

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...

DVWSSR.dll Vulnerability in Microsoft IIS 4.0 Web Servers

The following is based on information gleaned from a variety of sources. According to the Wall Street Journal, the discoverer is an unnamed employee of ClientLogic. FYI, my comments to Ted Bridis of WSJ yesterday about the issue were made with very little info only the info he was supplied, so fo...

CVE-1999-0285

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection...

CVE-2000-0067

CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...

CVE-1999-0285

CVE-1999-0285 affects the Windows NT Resource Kit telnet component. The vulnerability is a denial-of-service that occurs when a connection is opened and then immediately closed, exploited via network access. The Red Hat advisory and NVD entry reiterate that telnet on Windows NT Resource Kit is th...

CVE-2000-0067

CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...

PT-2000-1059 · Cybercash · Cybercash Merchant Connection Kit

Name of the Vulnerable Software and Affected Versions: CyberCash Merchant Connection Kit MCK affected versions not specified Description: The issue allows local users to modify files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains ...

Microsoft Zero Administration Kit (ZAK) 1.0 Office97 - Backdoor Access

Microsoft Zero Administration Kit ZAK 1.0 Office97 - Backdoor Access source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and...

Microsoft Zero Administration Kit (ZAK) 1.0 / Office97 - Backdoor Access

source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and system functions. In an instance where the end-user is not allowed to...

PT-1999-1030 · Microsoft · Telnet +1

Name of the Vulnerable Software and Affected Versions: Windows NT Resource Kit affected versions not specified Description: The issue is related to a denial of service in telnet, caused by opening and then immediately closing a connection. Recommendations: At the moment, there is no information...

CVE-1999-0142

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...

PT-1996-1030 · Oracle +1 · Java Applet Security Manager +2

Name of the Vulnerable Software and Affected Versions: Netscape Navigator version 2.0 Java Developer's Kit version 1.0 Description: The issue concerns the Java Applet Security Manager implementation, which allows an applet to connect to arbitrary hosts. Recommendations: For Netscape Navigator...

ROS-2-3317

2.3317 Notice of Update for RED OS Operating System “RED SOFT” RU.29926343.02.01-24 OOO “RED SOFT” informs you that the testing and release of the updated distribution of RED OS 7.3 have been completed. To update your copy of RED OS to the latest version, you need to perform a system update using...

ROS-2-2569

2.2569 Notification on the update of MIS OPERATION SYSTEM "RED OS" No. RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to perform a...

ROS-2-3084

2.3084 Notification on the update of MIS OPERATION SYSTEM "RED OS" RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to perform a...

ROS-2-2274

2.2274 Notification on the update of MIS OPERATION SYSTEM "RED OS" RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to perform a...