PT-2002-2814 · Hellbent · Hellbent

Name of the Vulnerable Software and Affected Versions: hellbent version 01 Description: The issue allows remote attackers to determine the full path of the web root directory. This is achieved by sending a GET request with a relative path that includes the root's parent. If the parent is incorrec...

Microsoft Data Access Components RDS Data Stub Remote Overflow

The remote DLL /msadc/msadcs.dll is accessible by anyone. Several flaws have been found in it in the past. We recommend that you restrict access to MSADC only to trusted hosts. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11161; scriptversion "1.41";...

Multiple IPsec implementations do not adequately validate authentication data

Overview IPsec implementations from multiple vendors do not adequately validate the authentication data in IPsec packets, exposing vulnerable systems to a denial of service. Description For background: RFC 2401 Security Architecture for the Internet Protocol RFC 2402 IP Authentication Header RFC...

Microsoft Windows Server Message Block (SMB) fails to properly handle SMB_COM_TRANSACTION packets requesting NetServerEnum2 transaction

Overview Microsoft Server Message Block SMB may crash when it receives a crafted SMBCOMTRANSACTION packet requesting a NetServerEnum2 transaction. Attackers can use this vulnerability to cause a denial of service. Description SMB is a protocol for sharing data and resources between computers. It ...

Oracle Reports Server Reports Web Cartridge (RWCGI60) vulnerable to buffer overflow via database name parameter

Overview A buffer overflow vulnerability in Oracle Reports Server 6i could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Reports Server process. Description Oracle Reports Server is a component of Oracle Application Server that handles client...

Oracle Web Cache contains buffer overflow vulnerabilities

Overview The CERT/CC is aware of a report about "several remotely exploitable buffer overflow vulnerabilities in the Oracle Web Cache Server" that could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Web Cache process. Description The Oracle Web Cac...

Oracle Application Server contains format string vulnerability

Overview The CERT/CC is aware of a report about a "remotely exploitable format string vulnerability in Oracle Application Server" that could allow an unauthenticated, remote attacker to execute arbitrary code on a vulnerable system. Description Oracle Application Server uses the Apache HTTP Serve...

PT-2002-1274 · Oracle · Tarantella Enterprise

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.0x through 3.20 Tarantella Enterprise version 3.11.903 Description: The issue allows remote attackers to view directory contents. This is achieved by providing an empty pg parameter in the ttawebtop.cgi script...

Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP request

Overview A buffer overflow vulnerability exists in the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS. A maliciously crafted HTTP request made to the PL/SQL module could cause a denial of service or execute arbitrary code with the...

PT-2001-2667 · Oracle · Solaris

Name of the Vulnerable Software and Affected Versions: Solaris versions 8 and earlier Description: The issue allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when the lpd daemon invokes a mail program. Recommendations...

PT-2001-1998 · 6Tunnel · 6Tunnel

Name of the Vulnerable Software and Affected Versions: 6tunnel versions 0.08 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by repeatedly connecting to and disconnecting from the server. This is due to the software not...

PT-2001-1980 · Oracle · Tarantella Enterprise

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.00 through 3.01 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the pg parameter of the ttawebtop.cgi endpoint...

PT-2001-1156 · Ibm · Lotus Notes Client

Name of the Vulnerable Software and Affected Versions: Lotus Notes Client R5 Description: The issue concerns the Extended Control List ECL feature of the Java Virtual Machine JVM in the affected software. It allows malicious web site operators to determine the existence of files on the client by...

Cisco IOS software vulnerable to DoS via HTTP request containing "?/"

Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to force affected switches and routers to crash and reboot. Description To exploit this vulnerability, the IOS HTTP interface must be enabled and the attacker must...

PT-2000-1437 · Bea · Bea Weblogic

Name of the Vulnerable Software and Affected Versions: BEA WebLogic versions 3.1.8 through 4.5.1 Description: The default configuration of the software allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in...

CVE-1999-0895

The provided data identifies CVE-1999-0895 affecting Firewall-1, in which LDAP attributes are not properly restricted. The entry describes a network-exposed issue with no authentication required, leading to partial disclosure/integrity/availability impact (CVSS v2 base score 7.5, HIGH). No concre...

PT-1999-1002 · Sun Microsystems · Solaris

Name of the Vulnerable Software and Affected Versions: Sun Microsystems Solaris versions 8 and 9, and certain earlier releases Description: The issue is related to insufficient protection of sensitive data in the /usr/ucb/ps component of the Solaris operating system. This allows local users to vi...

linux.2.x.ipc.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Linux 2.x IPC vunerability Linux IPC implementation seems to be broken. I noticed Alan about one/two months ago, so I believe it has been fixed in recent 2.2.x Linuxes. In fact, any luser may consume whole memory available on system using...

compaq.insight.manager.server.txt

Date: Wed, 26 May 1999 16:41:36 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990526.compaq-im.a Infosec Security Vulnerability Report No: Infosec.19990526.compaq-im.a ===================================== Vulnerability Summary --------------------- Problem:...

PT-1997-1001

Name of the Vulnerable Software and Affected Versions Mac OS versions affected versions not specified Cisco IOS versions affected versions not specified HP-UX versions affected versions not specified Tru64 UNIX versions affected versions not specified AIX versions affected versions not specified...