763 matches found
CVE-2001-0629
HP Event Correlation Service ecsd as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restoreconfig' command line parameter...
ADV/EXP: netkit <=0.17 in.telnetd remote buffer overflow
Product: netkit telnet protocol daemon, in.telnetd Version: netkit-telnet-0.17 and previous /usr/sbin/in.telnetd Severity: High Remote: Yes Allows: Remote ROOT level access. Workaround: Disable telnet access. Fix: Check with your vendor for an updated package. from...
CVE-2001-0179
Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."...
Solaris 2.6/7.0/8 - snmpXdmid Buffer Overflow (Metasploit)
source: https://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid contains a remotely exploitable buffer...
soft lite serverworx 3.0 - Directory Traversal
source: https://www.securityfocus.com/bid/2346/info It is possible for a remote user to gain read access to directories and files outside the root directory of ServerWorx. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose an arbitrary directory...
CVE-2000-1167
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat denyincoming" command, which allows remote attackers to connect to the target system...
CVE-2000-0930
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch...
CVE-2000-1225
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program...
CVE-2000-0988
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration...
Проблемы с безопасностью на уровне ресурсов в Windows 95/98/ME (Share Level Password)
Можно удаленно подключиться к защищенному паролем ресурсу не зная пароля и открыть сам пароль в короткий промежуток времени. Кроме того, можно вызвать DoS против системы используя определенные параметры SMB-вызовов...
ALERT: Remote Retrieval Of Authentication Data From Internet Explorer
=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-07-22-2-PUB ------------------------------------------------------------------------- Remote Retrieval Of Authentication Data From Internet Explorer...
CVE-2000-0683
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /.shtml/ into the URL, which invokes the SSIServlet...
CVE-2000-0682
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet...
@stake Advisory: SuSE Apache WebDAV Directory Listings (A090700-3 )
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com www.cerberus-infosec.co.uk Security Advisory Advisory Name: SuSE Apache WebDAV Directory Listings A090700-3 Release Date: 09/07/2000 Application: Apache 1.3.12 Platform: SuSE Linux 6.4 Severity: Attackers are able to retrie...
CVE-2000-0436
MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...
CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file...
Solaris 2.32.42.52.5.12.67.0 snoop - print_domain_name Remote Buffer Overflow
Solaris 2.32.42.52.5.12.67.0 snoop - printdomainname Remote Buffer Overflow // source: https://www.securityfocus.com/bid/858/info If a solaris machine is running snoop in verbose mode, it may be possible to compromise its security remotely by exploiting a buffer overflow in snoop. The problem is ...