PT-2002-2566 · Microsoft · Windows Media Player

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player WMP version 6.3 Description: The issue allows local users to gain privileges by deleting or modifying executables due to world-writable permissions. Recommendations: For Microsoft Windows Media Player WMP versio...

Full Disclosure: Windows File Protection Old Security Catalog Vulnerability

============================================================================ == SECURITY ALERT Windows File Protection Old Security Catalog Vulnerability December 26, 2002 Full Disclosure, [email protected] and others August 26, 2002 Private Disclosure, Microsoft Press and others Jason Coombs...

CVE-2002-0979

The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code...

CVE-2002-0456

Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames...

Qpopper .qpopper-options Username Handling Overflow

The remote Qpopper server, according to its banner, is running version 4.0.3 or version 4.0.4. These versions are vulnerable to a buffer overflow if they are configured to allow the processing of a user's /.qpopper-options file. A local user can cause a buffer overflow by setting the 'bulldir'...

AOL Instant Messenger vulnerable to DoS via crafted GIF file

Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM allows users to send image files to one another. By sending a crafted GIF image, an attacker can cause the victim's...

CVE-1999-1085: Undefined Security Weakness

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...

PT-2001-1995 · Cerberus · Cerberus Ftp Server

Name of the Vulnerable Software and Affected Versions: Cerberus FTP server versions 1.0 through 1.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a large number of "PASV" requests. Recommendations: For Cerberus FTP server versions 1....

SnapStream PVS 1.2 - Plaintext Password

SnapStream PVS 1.2 - Plaintext Password source: https://www.securityfocus.com/bid/3101/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream...

SnapStream PVS 1.2 - Plaintext Password

source: https://www.securityfocus.com/bid/3101/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129. Th...

Microsoft Internet Explorer 5.5 - File Disclosure

Microsoft Internet Explorer 5.5 - File Disclosure source: https://www.securityfocus.com/bid/2833/info Internet Explorer contains a flaw which could enable a remote web site operator to retrieve a known file from a visiting user's system. If a specially formed script containing GetObject function...

his software auktion 1.62 - Directory Traversal

his software auktion 1.62 - Directory Traversal source: https://www.securityfocus.com/bid/2367/info A remote user could gain read access to known files outside of the root directory where HIS Software Auktion 1.62 resides. Requesting a specially crafted URL composed of '../' sequences along with...

CVE-2000-1139

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability...

Advisory CA-2001-01

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-01 Interbase Server Contains Compiled-in Back Door Account Original release date: January 10, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Borland/Inprise Interbase 4.x and 5...

Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password

Overview Description Interbase is an open source database package that is distributed by Borland/Inprise. The server contains a compiled-in backdoor account with a known password.In the following interbase code, references are made about a LOCKSMITH user: ./jrd/dyn.e ./jrd/isc.c ./jrd/jrd.c...

CVE-2000-1139

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability...

Advisory: exmh symlink vulnerability

Author: Stan Bubrouski [email protected] Date: December 31, 2000 Package: exmh Versions affected: 2.2 and probably previous versions. Severity: A malicious local user could use a symlink attack to overwrite any file writable by the user executing exmh. Problem: When exmh detects a problem at start...

Microsoft Internet Explorer 5 - 'INPUT TYPE=FILE' Remote File Upload

Example.. IE 5 Versiontd align="right"...

Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities

Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities source: https://www.securityfocus.com/bid/1278/info A remote user may browse any known directory on a host running Fastraq Mailtraq 1.1.4 by making a URL request that includes the '../' string. In addition, requesting a URL appended with "../...

cgichk.r

REBOL Title: "CGI Scanner" Author: "Epicurus" Date: 29-May-1999 File: %cgichk.r Purpose: To scan a domain for CGI scripts with known vulnerabilities. secure none print "CGI Scanner in Rebol v1.0" prin "Host: " remote: input scripts: %/cgi-bin/rwwwshell.pl %/cgi-bin/phf %/cgi-bin/Count.cgi...