9984 matches found
CVE-1999-1233
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...
CVE-1999-1233: Undefined Security Weakness
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...
[SA-2002:01] Slashcode login vulnerability
SA-2002:01 Slashcode login vulnerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a cross-site scripting vulnerability in all versions prior to 2.2.5, released February 7, 2002. Users who have Javascript enabled, and who can be persuaded to click...
Vulnerabilities in squirrelmail
Multiple security vulnerabilties exist in SquirrelMail v 1.2.3 that allow malicious HTML messages to: send messages appearing to come from the user run arbitrary javascript Description ----------- The compose.php script allows parameters to be passed as GETs. Therefore including the following in ...
Authentication By-Pass Vulnerability in OpenSSH-2.3.1 (devel snapshot)
Please, check http://www.openssh.com/security.html for a full summary of security related issues in OpenSSH. ---------------------------------------------------------------------------- OpenBSD Security Advisory February 8, 2001 Authentication By-Pass Vulnerability in OpenSSH-2.3.1...
Локальный DoS против Windows
Открытие большого числа datagram-сокетов в клиентском приложении приводит к невозможности работать с UDP Включая разрешение имен...
Microsoft Windows 982000 - UDP Socket Denial of Service
Microsoft Windows 982000 - UDP Socket Denial of Service source: https://www.securityfocus.com/bid/2340/info Microsoft Windows 2000 and 98 are subject to a denial of service condition. Receiving a maliciously crafted email or visiting a malicious web site could prevent Windows 2000 from DNS...
CVE-2000-1178: Improper Link Resolution Before File Access
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...
Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...
Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)
Oops Proxy Server 1.4.22 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...
Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...
Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)
Oops Proxy Server 1.4.22 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...
ISC BIND 8.2.2-P5 - Denial of Service
source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in the Compressed Zone Transfer ZXFR...
SSH host key authentication can be bypassed when DNS is used to resolve localhost
Overview This vulnerability allows an attacker to redirect an SSH connection to an arbitary host. Description When making connections to localhost, SSH disables host key checking to provide compatibility with NFS filesystems. As a result, if the victim's machine uses a poisoned DNS server to...
[COVERT-2000-08] O'Reilly WebSite Professional Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 19, 2000 O'Reilly WebSite Professional Overflow COVERT-2000-08 o Synopsis The indexing utility webfind.exe distributed with O'Reilly WebSite Professional contains an unchecked buffer allowing...
CVE-2000-0342: Improper Link Resolution Before File Access
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...
DoS против PGP Certificate Server
При подключении на порт 4000 хоста у которого не разрешается имя DNS сервер произхводит обращение по нулевому указателю...
PT-2000-1997 · Microsoft · Windows 98 +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 98, NT 4.0, 2000, and XP Description: The default configuration for the domain name resolver sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query,...
ISC BIND 4.9.78.x - Traffic Amplification and NS Route Discovery
ISC BIND 4.9.78.x - Traffic Amplification and NS Route Discovery source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists ...