6440 matches found
IBM Net.Commerce 2.03.x4.x - orderdspc.d2w order_rn Option SQL Injection
IBM Net.Commerce 2.03.x4.x - orderdspc.d2w orderrn Option SQL Injection source: https://www.securityfocus.com/bid/2350/info IBM's Net.Commerce ecommerce platform supports macros which, by default, do not properly validate requests in user-supplied input. A thoughtfully-formed request to a...
Microsoft Indexing Service (Windows 2000) - File Verification
Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or distribute parts of it without...
ezboard-scx-sa-03.txt
============================================================================= Securax-SA-03 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Ezboard ver. 5.3.9 can be caused unreachable. Announced: 2000-05-24...
CVE-2000-0325
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability...
CVE-1999-0797
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...
ISC BIND 4.9.7/8.x - Traffic Amplification and NS Route Discovery
source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists in the default configuration of many popular DNS servers. If a...
CVE-1999-0533
A DNS server allows inverse queries...
CVE-1999-0533
CVE-1999-0533 describes a vulnerability in a DNS server that allows inverse queries. Connected documents confirm the issue but do not specify affected products/versions, root cause in code, or a fix. Red Hat, NVD, CVE listings reiterate the description and provide no remediation details. PT-1997-...
CVE-1999-0259
cfingerd lists all users on a system via search.@target...
DNS_DoS.txt
Subject: Possible Denial Of Service using DNS To: [email protected] SPJ-002-000: .::::::::+ s0ftpr0ject 99 +::::::::. ::::+ Digital Security for Y2K +:::: :::'""""'""""'""""'""""'""'""::: ::'.gS$"$Sn. .gS$"$Sn. Sn.:: :: $$$$$ $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$ $$$$$ $$$$ :: ::...
os-fingerprinting.txt
Date: Mon, 28 Dec 1998 16:16:40 -0700 From: David G. Andersen To: [email protected] Subject: A few more fingerprinting techniques - time and netmask The release of nmap reminded me about some work I did a while ago for yet-more-information-gathering-programs, and I thought it might be...
hp5crash.txt
http://www.rootshell.com/ Date: Wed, 6 Jan 1999 14:59:21 -0800 From: [email protected] Subject: Another way to crash HP printers A few months ago, I reported that you could crash HP 5m printers by doing a multivarible SNMP query on the interpreters table. I have since found a similar problem tha...
[SECURITY] New versions of eperl fixes security drift
We have received a report from Tiago Luz Pinto that the eperl package included in 2.0 misinterprets ISINDEX queries. This can lead to arbitrary Perl code being executed on the server. We recommend you upgrade your eperl package immediately. dpkg -i file.deb will install the referenced file. Debia...
Netscape Enterprise Server 3.x4.x - PageServices Information Disclosure
Netscape Enterprise Server 3.x4.x - PageServices Information Disclosure source: https://www.securityfocus.com/bid/7621/info A vulnerability has been reported for Netscape Enterprise Server. The problem is said to occur while processing HTTP queries containing the '?PageServices' URI parameter...
Netscape Enterprise Server 3.x/4.x - PageServices Information Disclosure
source: https://www.securityfocus.com/bid/7621/info A vulnerability has been reported for Netscape Enterprise Server. The problem is said to occur while processing HTTP queries containing the '?PageServices' URI parameter. After processing this query the affected server may disclose the contents ...
CVE-1999-0533
A DNS server allows inverse queries...
PT-1997-1153 · Unknown · Dns Server
Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue concerns a DNS server that permits inverse queries, which could potentially be exploited. Recommendations: At the moment, there is no information about a newer version that...
Vulnerabilidades en BIND y Soluciones
Advisory ID Internal CORE-1999-0024 CVE Name: CVE-1999-0024 Bugtraq ID: 678 Descripción de los problemas Esta advertencia contiene descripciones y soluciones para dos vulnerabilidades presentes en las distribuciones actuales de BIND. Los problemas están siendo explotados activamente en Internet. ...
PT-2010-5658 · Isc +2 · Isc Bind +2
Name of the Vulnerable Software and Affected Versions: ISC BIND versions 9.0.x through 9.3.x ISC BIND versions 9.4 before 9.4.3-P5 ISC BIND versions 9.5 before 9.5.2-P2 ISC BIND versions 9.6 before 9.6.1-P3 ISC BIND version 9.7.0 beta Description: The issue allows remote attackers to conduct DNS...