533 matches found
Governs the granting of leave true when True also false-the“real”IP security risks-vulnerability warning-the black bar safety net
Let us look at the ASP code first: Function getIP Dim strIPAddr as string If Request. ServerVariables"HTTPXFORWARDEDFOR" = "" OR InStrRequest. ServerVariables"HTTPXFORWARDEDFOR", "unknown" 0 Then strIPAddr = Request. ServerVariables"REMOTEADDR" ElseIf InStrRequest...
Sniffit 0.3.7 FOR NT installation and examples-vulnerabilities-warning-the black bar safety net
Sniffit 0.3.7 launched the NT version, also support WINDOWS2000, I want to hurry to try, because I A friend wanted to install Netxray 3. 0 3 in WIN2K 2000BETA3 equipped not, is probably not supported by WIN2K. So see SNIFFIT NT version I this morning to pull it down. This sniffit need WinPcap...
Low: Red Hat Security Advisory: tcpdump security update
Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP parsing. Tcpdump is a command-line tool for monitoring network traffic. Tcpdump v3.8.1 and earlier versions contained multiple flaws in the packet display functions for the ISAKMP protocol. Upon receiving specially...
YAK! 2.1.0 still vulnerable
YAK! 2.1.0 still vulnerable =========================== for file transfer yak uses ftp mode. Yak! listens on port 3535 for file transfer in ftp mode. vulnerability in the previous version was, they were using constant username and pass combination for ftp login. 2.1.0 version seems to overcome th...
DEBIAN-CVE-2003-0489
tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute...
CVE-2003-0489
CVE-2003-0489 applies to tcptraceroute 1.4 and earlier, where the program’s privilege-dropping after obtaining a file descriptor for raw packet capture is incomplete. Several connected sources document that a local attacker could potentially access the capture descriptor via a separate vulnerabil...
DSA-330 tcptraceroute - failure to drop root privileges
Bulletin has no description...
DEBIAN-CVE-2002-1976
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...
MailEnable POP3 Server remote shutdown !:/ -newest ~ (and previous) bufferoverflow-
My first post, please bare with me. -/-About.-/- I found this problem auditing a webserver, it’s a standard bufferoverflow i guess, but i am not sure how to find all the technical information but if anyone knows what to do i would like to know, if some one have the time to send a brief mail or...
Re:
Доброе время суток Учёный Кот!!! Ситуация воспроизводиться следующим образом. Включается NetXray на отловку пакетов желательно настроенно только на атакуемую машину и при обычной попытки зайти на компбютер жертвы ловиться пакет тип NetBIOS,расшифровка в NetXray: Session Request-Called Name: Cyber...
napster.path-disclosure.txt
-------------------------------------------------- time 1:30 am date 9-18-00 affected systems: any system running napster client hasn't been tested for the gnapster client -------------------------------------------------- ADVISORY: here goes...... hi lindsay, pat, jason , and t-rex After running...
sl0scan.pl
Date: Tue, 9 Feb 1999 20:53:34 -0500 From: miff To: [email protected] Subject: sl0scan ambiguous source portscanner hello all, I hear that maybe nmap does something similar to this, but I'm posting it anyway to see if there is enough interest for me to continue developing it. This is based on...
PT-1999-1615 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal affected versions not specified Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the packet capture file. Recommendations: At the moment, there is no information about a newer version tha...