[SECURITY] New version of tcpdump released

Package: tcpdump Vulnerability: remote exploit Debian-specific: no During internal source code auditing by FreeBSD several buffer overflows were found which allow an attacker to make tcpdump crash by sending carefully crafted packets to a network that is being monitored with tcpdump. This has bee...

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account...

BB4 Big Brother Network Monitor 1.5 d2 - 'bb-hist.sh?HISTFILE' File Existence Disclosure

source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway Interface package included with Big...

System Monitor ActiveX Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 System Monitor ActiveX Buffer Overflow Vulnerability USSR Advisory Code: USSR-2000057 Public Disclosure Date: November 3, 2000 Vendors Affected: Microsoft Corporation http://www.microsoft.com Systems Affected: Microsoft Windows 2000 Server Microsoft...

HP-UX 10.20 resource monitor service

Problem: on HP-UX 10.20 you can change any file on the root partition to mode 644: $ uname -sr HP-UX B.10.20 $ cd /etc/opt/resmon/log $ mv registrar.log registrar.log.orig $ ls -l /.shhistory -rw------- 1 root sys 3316 Sep 20 15:22 /.shhistory $ ln /.shhistory registrar.log $ nc hpux.example.com...

Дырка в HP-UX 10.20 resource monitor (symlink)

Проблема символьных линков позволяет прочитать любой файл...

Дырки в Network Monitor Windows NT/2000

Переполнение буфера в фильтре разбирающем HTTP...

[COVERT-2000-11] Multiple Network Monitor Overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory November 1, 2000 Multiple Network Monitor Overflows COVERT-2000-11 o Synopsis Multiple buffer overflows in the Windows NT Network Monitor allow a remote attacker to execute arbitrary code or deny...

Security Bulletin (MS00-083)

Microsoft Security Bulletin MS00-083 - -------------------------------------- Patch Available for "Netmon Protocol Parsing" Vulnerability Originally posted: November 01, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr and...

ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in Microsoft Windows NT 4.0 and Windows 2000 Network Monitor

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

CVE-2000-0450

Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands...

CVE-2000-0450

Technical details (affected product, version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

SessionWall-3 Paper + (links to) code

Dear All, The example code which compliments this paper can be found on http://www.phate.net/progs/sw3 Best regards, and enjoy. -cdx -- Design and Implementation Flaws in SessionWall-3 or "Using and Abusing SessionWall-3 with the power of XOR" by Ob1 [email protected] Maelstrom [email protected] Codex...

Дырка в Secret Disk

На машинах с несколькими мониторами скринсейвер с паролем, запускающийся при изъятии ключа, запускается только на одном мониторе...

Aladdin Software Security SecretDisk console blocking failure

Good $daytime, SecretDisk, made by Aladdin Software Security R.D., http://www.aladdin.ru/ provides cryptographic file system for Win9x boxes. It supports usage of parallel port keys, smartcards, PCMCIA cards, or recently mentioned USB eTokens, in combination with password protection. Among others...

CVE-2000-0450

Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands...

Ipswitch IMail 5.0.86.06.1 - IMonitor status.cgi Denial of Service

Ipswitch IMail 5.0.86.06.1 - IMonitor status.cgi Denial of Service source: https://www.securityfocus.com/bid/914/info IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to...

Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service

source: https://www.securityfocus.com/bid/914/info IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to support web-based monitoring. One of the cgi scripts, status.cgi, is...

iis4_remote_DoS.txt

Subject: IIS 4.0 remote DoS MS99-029 To: [email protected] Hi, I found a kind of DoS attack against IIS 4.0 on NT SP4 & SP5. I reported it to MS and they've provided HotFix for this. Problem Description ------------------- Simple play. I sent lots of "Host:aaaaa...aa" to IIS like... GET /...

ms-netmon-sms-DoS.txt

Microsoft's Network Monitor susceptible to Denial of Service attack. Microsoft's Network Monitor is a tool provided by Microsoft with its Windows NT Server and System Management Server SMS. The tool gives administrators the ability to analyze and maintain the integrity of the network, by providin...