6426 matches found
PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow
// source: https://www.securityfocus.com/bid/2831/info TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew. A problem in the software package makes it possible for a remote user to gain a local shell. Due to a buffer overflow in the authenticatio...
CVE-2001-0435
The CVE-2001-0435 entry concerns the split key mechanism in PGP 7.0 . The root issue is that a key share holder can obtain access to the entire key by enabling the “Cache passphrase while logged on” option and then capturing the passphrases of other share holders as they authenticate. Documents s...
CVE-2001-0435: Undefined Security Weakness
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
CVE-2001-0284: Undefined Security Weakness
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header AH IPv4 option...
CVE-2001-0315
The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...
CVE-2000-0808
The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...
CVE-2000-0807: Undefined Security Weakness
The OPSEC communications authentication mechanism fwn1 in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."...
Exploiting Kernel Buffer Overflows FreeBSD Style
-----BEGIN PGP SIGNED MESSAGE----- Exploiting Kernel Buffer Overflows FreeBSD Style: Defeating Security Levels and Breaking Out of Jail2 Esa Etelavuori December 28, 2000 1. Introduction This is a detailed case study discussing the exploitation of the FreeBSD kernel process filesystem buffer...
CVE-2000-1147: Undefined Security Weakness
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag...
ManTrap 1.6.1 - Root Directory Inode Disclosure
ManTrap 1.6.1 - Root Directory Inode Disclosure / source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real ...
Проблемы в авторизации MySQL
ИСпользуется слабый механизм хэширования при авторизации позволяющий восстановить пароль...
CVE-1999-0791
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...
csm.proxy.bypass.txt
Hi there! Something which might be worth a note... we are using csm´s proxy server and it´s siteblocker feature which is an option to enable url-filtering...BUT...if you surf to an "outside" proxy e.g. spaceproxy you can bypass url filtering by siteblocker due to a imho "design flaw" in the parsi...
IP Fragmentation Denial-of-Service Vulnerability in FireWall-1
Overview A large stream of IP traffic can monopolize the CPU of a Check Point FireWall-1 firewall, resulting in a denial-of-service condition. Description A denial-of-service vulnerability has been discovered in the FireWall-1 product from Check Point Software Technologies. Check Point has tested...
CVE-1999-0717
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97...
CVE-1999-0717: Undefined Security Weakness
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97...
CVE-1999-0791
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...
Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow
Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to ...
Samba 1.9.19 - Password Remote Buffer Overflow
Samba 1.9.19 - Password Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1816/info Samba is an open source software suite that provides seamless file and print services to SMB/CIFS clients. Certain older versions of Samba had a remotely exploitable buffer overflow vulnerability...