6551 matches found
Alcatel ADSL Modem Unrestricted Remote Access
On the Alcatel Speed Touch Pro ADSL modem, a protection mechanism feature is available to ensure that nobody can gain remote access to the modem via the WAN/DSL interface. This mechanism guarantees that nobody from outside your network can access the modem's management interface and potentially...
CVE-1999-1239
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so...
CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
eXtremail 1.x2.1 - Remote Format String (2)
eXtremail 1.x2.1 - Remote Format String 2 // source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously...
PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow
PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow // source: https://www.securityfocus.com/bid/2831/info TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew. A problem in the software package makes it possible for a remote us...
PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow
// source: https://www.securityfocus.com/bid/2831/info TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew. A problem in the software package makes it possible for a remote user to gain a local shell. Due to a buffer overflow in the authenticatio...
CVE-2001-0435
The CVE-2001-0435 entry concerns the split key mechanism in PGP 7.0 . The root issue is that a key share holder can obtain access to the entire key by enabling the “Cache passphrase while logged on” option and then capturing the passphrases of other share holders as they authenticate. Documents s...
CVE-2001-0435: Undefined Security Weakness
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
CVE-2001-0284: Undefined Security Weakness
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header AH IPv4 option...
CVE-2001-0315
The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...
CVE-2000-0808
The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...
CVE-2000-0807: Undefined Security Weakness
The OPSEC communications authentication mechanism fwn1 in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."...
Exploiting Kernel Buffer Overflows FreeBSD Style
-----BEGIN PGP SIGNED MESSAGE----- Exploiting Kernel Buffer Overflows FreeBSD Style: Defeating Security Levels and Breaking Out of Jail2 Esa Etelavuori December 28, 2000 1. Introduction This is a detailed case study discussing the exploitation of the FreeBSD kernel process filesystem buffer...
CVE-2000-1147: Undefined Security Weakness
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag...
ManTrap 1.6.1 - Root Directory Inode Disclosure
ManTrap 1.6.1 - Root Directory Inode Disclosure / source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real ...
Проблемы в авторизации MySQL
ИСпользуется слабый механизм хэширования при авторизации позволяющий восстановить пароль...
CVE-1999-0791
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...
csm.proxy.bypass.txt
Hi there! Something which might be worth a note... we are using csm´s proxy server and it´s siteblocker feature which is an option to enable url-filtering...BUT...if you surf to an "outside" proxy e.g. spaceproxy you can bypass url filtering by siteblocker due to a imho "design flaw" in the parsi...
IP Fragmentation Denial-of-Service Vulnerability in FireWall-1
Overview A large stream of IP traffic can monopolize the CPU of a Check Point FireWall-1 firewall, resulting in a denial-of-service condition. Description A denial-of-service vulnerability has been discovered in the FireWall-1 product from Check Point Software Technologies. Check Point has tested...