2834 matches found
SSH1 SSH Daemon Logging Failure
The remote host is running SSH Communications Security SSH 1.2.30 or older. The remote version of this software does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute-force attack. This script was written by Xue Yong Zhi See t...
CVE-2002-1233: Undefined Security Weakness
A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...
CVE-1999-1402: Undefined Security Weakness
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket...
CVE-2001-0850: Undefined Security Weakness
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...
CVE-2000-0351: Undefined Security Weakness
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages...
def-2001-18: Watchguard Firebox II Kernel DoS
====================================================================== Defcom Labs Advisory def-2001-18 Watchguard Firebox II Kernel DoS Authors: Andreas Sandor [email protected] Peter Grьndl [email protected] Release Date: 2001-04-05...
SSH with Kerberos NFS Share Ticket Disclosure
The remote host is running a version of SSH which is older than or as old as version 1.2.27. There is a flaw in the remote version of this software which allows an attacker to eavesdrop the kerberos tickets of legitimate users of this service, as sshd will set their environment variable KRB5CCNAM...
CVE-2000-0415: Undefined Security Weakness
Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name...
CVE-2000-0121: Undefined Security Weakness
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...
CVE-1999-0354: Undefined Security Weakness
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message...
PT-1999-1135 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned, so the information cannot be determined. Description: A backdoor password was placed in a service or application by the developer. Recommendations: At the moment, there is no information about a...
Windows XP or Greater
This detectoid will resolve true for NT 5.1 or greater...