3022 matches found
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server malformed Web Publisher command causes denial-of-service
Overview A vulnerability exists in iPlanet Web Server, Enterprise Edition and Netscape Enterprise Server in which a malformed Web Publisher command can crash the web server process. This vulnerability only affects Windows NT based servers. Description ProCheckup has reported a vulnerability in...
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server Web Publisher command exposes server to brute force attack
Overview A vulnerability exists in iPlanet Web Server Enterprise Edition and Netscape Enterprise Server that allows an attacker to make repeated authentication attempts if a server is configured to use HTTP basic authentication. While the risk is not greater than any other brute force attack usin...
iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)
iPlanet 4.1 Web Publisher - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...
iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)
source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer overflow. This could cause the termination of the...
iPlanet 4.1 Web Publisher - Remote Buffer Overflow (2)
source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer overflow. This could cause the termination of the...
CVE-2000-0720
The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...
CVE-2000-0720
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...
Netscape.Publisher.ACL.txt
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
Netscape E.S. Web Publisher ACL Vulnerabilities
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
Проблемы с разрешениями в Netscape Enterprise Server
В установке по-умолчанию большое число "слабых" разрешений, которык могут привести к компрометации сервера в компоненте "Web Publisher"...
CVE-2000-0720
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...
Дырка в News Publisher CGI
Из-за недостаточной проверки ввода пользователя есть возможность добавлять пользователей...
News Publisher CGI Vulnerability
Product: News Publisher Versions: Tested v1.05, 1.05a, 1.05b and 1.06 newest OS: Unix and Winnt Vendor: Notified Web Site: www.gwscripts.com The Problem, yet again CGI authors use nested IF statements to decide what action to take upon and incoming request. This time the problem allows ppl to add...
GWScripts News Publisher 1.0 - author.file Write
GWScripts News Publisher 1.0 - author.file Write source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request...
GWScripts News Publisher 1.0 - 'author.file' Write
source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request using any arbitrary username and password: POST...
Update for Microsoft Publisher 2013 (KB3023050) 32-Bit Edition
Update for Microsoft Publisher 2013 KB3023050 32-Bit Edition...
Update for Microsoft Publisher 2013 (KB2883048) 64-Bit Edition
Update for Microsoft Publisher 2013 KB2883048 64-Bit Edition...
Update for Microsoft Publisher 2013 (KB3023050) 64-Bit Edition
Update for Microsoft Publisher 2013 KB3023050 64-Bit Edition...