CVE-2002-0723: Undefined Security Weakness

Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Tag."...

Code execution via Microsoft Office XP

It's possible to include scripting object which fill be activated in case user reply or forward e-mail message. Host method of spreadsheet object allows creation and execution of arbitrary files...

PT-2002-1248

Name of the Vulnerable Software and Affected Versions Zope versions 2.2.0 through 2.5.1 Description The issue is related to improper access verification for objects with proxy roles. This could allow certain users to access documents in a way that violates the intended configuration...

Microsoft Internet Explorer 5/6 - Self-Referential Object Denial of Service

source: https://www.securityfocus.com/bid/4564/info Microsoft Internet Explorer is vulnerable to a denial of service due to an error in handling certain self-referential definitions in HTML documents. This occurs when an object of type "text/html" is specified, with the DATA field referencing the...

Локальный DoS против Windows NT (mutex)

Пользователь может захватить все mutex-объекты, после чего другие приложения не смогут работать с сетью...

Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password

Overview Description Interbase is an open source database package that is distributed by Borland/Inprise. The server contains a compiled-in backdoor account with a known password.In the following interbase code, references are made about a LOCKSMITH user: ./jrd/dyn.e ./jrd/isc.c ./jrd/jrd.c...

CVE-2000-1212: Undefined Security Weakness

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects...

CVE-2000-1211: Undefined Security Weakness

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities...

Утечка информации в Novell Netware (Object enumeration)

Сервера Netware с поддержкой TCP/IP сообщают информацию об объектах NDS через анонимное соединение TCP/524...

Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution

source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsoft Internet Explorer or Outlook. Th...

Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware

Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...

Очередная уязвимость IE при работе с объектами Office

Создавая ActiveX-объекты для файлов .xla, .ppt, .mdb можно получить доступ к методу SaveAs, сохранить любой файл локально и запустить его на выполнение...

wordpad-ie.txt

Georgi Guninski security advisory 7, 2000 Wordpad vulnerability, exploitable also in IE for Win9x Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for an...

ie50.xml.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

CVE-2026-65107

Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

PT-2010-5675 · Gnu +1 · Glibc +1

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.3 glibc versions 2.12.x prior to 2.12.2 Description: The issue is related to the improper restriction of the use of the LD AUDIT environment variable to reference dynamic shared objects DSOs as audit objects. This...

Security Update for Windows 2000 (KB901017)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...

Security Update for Windows Server 2003 (KB901017)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...

Security Update for Windows Server 2003 64-bit Itanium Edition (KB901017)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...