3623 matches found
iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)
iPlanet 4.1 Web Publisher - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...
iPlanet 4.1 Web Publisher - Remote Buffer Overflow (2)
source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer overflow. This could cause the termination of the...
iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)
source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer overflow. This could cause the termination of the...
CVE-2000-0720
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...
CVE-2000-0720
The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...
CVE-2000-0720: Undefined Security Weakness
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...
Netscape.Publisher.ACL.txt
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
Netscape E.S. Web Publisher ACL Vulnerabilities
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
Проблемы с разрешениями в Netscape Enterprise Server
В установке по-умолчанию большое число "слабых" разрешений, которык могут привести к компрометации сервера в компоненте "Web Publisher"...
CVE-2000-0720
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi progr...
Дырка в News Publisher CGI
Из-за недостаточной проверки ввода пользователя есть возможность добавлять пользователей...
News Publisher CGI Vulnerability
Product: News Publisher Versions: Tested v1.05, 1.05a, 1.05b and 1.06 newest OS: Unix and Winnt Vendor: Notified Web Site: www.gwscripts.com The Problem, yet again CGI authors use nested IF statements to decide what action to take upon and incoming request. This time the problem allows ppl to add...
GWScripts News Publisher 1.0 - author.file Write
GWScripts News Publisher 1.0 - author.file Write source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request...
GWScripts News Publisher 1.0 - 'author.file' Write
source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request using any arbitrary username and password: POST...
Update for Microsoft Publisher 2016 (KB3128047) 64-Bit Edition
Update for Microsoft Publisher 2016 KB3128047 64-Bit Edition...
Update for Microsoft Publisher 2013 (KB3114329) 64-Bit Edition
Update for Microsoft Publisher 2013 KB3114329 64-Bit Edition...
Update for Microsoft Publisher 2013 (KB3023050) 64-Bit Edition
Update for Microsoft Publisher 2013 KB3023050 64-Bit Edition...
Update for Microsoft Publisher 2013 (KB2883048) 64-Bit Edition
Update for Microsoft Publisher 2013 KB2883048 64-Bit Edition...