1664 matches found
CVE-2004-2619: Undefined Security Weakness
ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted...
CVE-2005-3647: Undefined Security Weakness
Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory...
IBM Tivoli Directory Server protection bypass
No description provided...
CVE-2005-3499: Undefined Security Weakness
Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file...
CVE-2005-3415: Undefined Security Weakness
phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE GPC variable and a GLOBALS variable with the same name, which causes phpBB to unset the GLOBALS variable but not the GPC variable...
CVE-2005-2742
SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...
[SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass
-------------------------------------------------------------------------- Debian Security Advisory DSA 862-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2005 http://www.debian.org/security/faq -...
Security Bypass Vulnerability with Ruby
The Ruby language has a security mechanism security model that can restrict operations on untrusted objects. This security model is based on mechanisms called "object taint" and "safe level." A vulnerability has been confirmed that allows arbitrary script execution by bypassing the "safe level"...
mod_auth_shadow protection bypass
Access restrictions for different authorization mechanisms may be bypassed if modauthshadow is used...
Metasploit Framework Defanged mode protection bypass
It's possible to overwrite Defanged environment variable with StateToOptions function...
KF Webserver protection bypass
By requesting resource like http://victimaddress/All20Disk20Drives/C:/ it's possible to access protected directory...
security flaw
Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...
Shoreline Firewall (ShoreWall) protection bypass
If MAC addres authentication is used, all security rules and policies are bypassed...
CVE-2005-2145: Undefined Security Weakness
The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sending an "allow" message to bypass a warning message...
CVE-2005-2144: Undefined Security Weakness
Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...
PrevX Pro Intrusion Prevension System multiple vulnerabilities
Protection bypass be using memory mapping and internal syscalls, DoS...
IBM DB2 universal database protection bypass
User with only SELECT permissions can can insert, update or delete records...
Multiple Sun Solaris perl modules problems
Safe.pm protection bypass, CGI.pm crossite scripting...
CVE-2002-1778: Undefined Security Weakness
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...
CVE-2002-1776: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed th...