5817 matches found
CVE-2003-0080
The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...
Sygate Security Bulletin ID SS20030129-0002
Sygate Security Bulletin Sygate was made aware of an exposure in Sygate Personal Firewall 5.0 and Sygate Security Agent 3.0 on 1/23/2003 by David Fernandez Madrid [email protected]. Sygate Security Bulletin ID ---------------------------- SS20030129-0002 Description ------------ The reporter ...
[LSD] Java and JVM security vulnerabilities
We would like to inform you about several security vulnerabilities in Java Virtual Machine implementations that we have found during our research. These vulnerabilities affect at least JVMs used in Netscape Communicator and Microsoft Internet Explorer web browsers. Below you can find their brief...
CVE-2002-0714
FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...
Microsoft SQL Server 2000 - Resolution Service Heap Overflow
Microsoft SQL Server 2000 - Resolution Service Heap Overflow source: https://www.securityfocus.com/bid/5310/info A vulnerability in Microsoft SQL Server 2000 could allow remote attackers to access target hosts. A problem in the SQL Server Resolution Service allows a remote attacker to execute...
CVE-2001-0977
CVE-2001-0977 affects slapd in OpenLDAP, where OpenLDAP 1.x prior to 1.2.12 and 2.x prior to 2.0.8 are vulnerable. The issue is triggered by receiving LDAP BER length fields with invalid lengths, allowing remote attackers to cause a denial-of-service crash. Public advisories describe this as a re...
CVE-2001-0977
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service crash via an invalid Basic Encoding Rules BER length field...
CVE-2002-0452
Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible...
CVE-2001-1171
The CVE affects Check Point Firewall-1, version 3.0b through 4.0 SP1. The root cause is a symlink-following issue during policy rule compilation that creates a world-writable temporary .cpp file, enabling local users to gain privileges or modify the firewall policy. No exploitation details or in-...
Foundry Networks ServerIron don't decode URIs
Date : 13/03/2002 . By : Frank DENIS [email protected] Vendor : Foundry Networks http://www.foundrynet.com . Product: ServerIron web switches. Summary: Vulnerability in URI parsing code allows to bypass rules. ------------------- DESCRIPTION ------------------- Foundry Networks' ServerIron Family...
Выполнение команд в exim (code execution)
При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...
CVE-1999-1018
CVE-1999-1018 concerns Linux kernels 2.2.10 and earlier, where the IP fragmentation reassembly step is performed after some header checks. The issue allows a remote attacker to bypass IP filtering rules by sending multiple fragments with 0 offsets, undermining filters that rely on header informat...
CVE-1999-1018
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets...
FreeBSD-SA-01:53.ipfw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:53 Security Advisory FreeBSD, Inc. Topic: ipfw me' on P2P interfaces matches remote address Category: core Module: ipfw Announced: 2001-08-17 Credits: Igor M Podlesny...
flaw in RH ``mkpasswd'' command
Hey, The mkpasswd password generator that ships in the expect'' package of at least RedHat 6.2 generates only a relatively small number 2^15 for the default password length of passwords. Presumably this is a result of trying to apply too many rules of what is a good'' password to the generation...
Apache Httpd < 1.3.14 : Rewrite rules that include references allow access to any file
The Rewrite module, modrewrite, can allow access to any file on the web server. The vulnerability occurs only with certain specific cases of using regular expression references in RewriteRule directives: If the destination of a RewriteRule contains regular expression references then an attacker...
Cisco PIX Firewall (smtp content filtering hack)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How to escape "fixup smtp" of Cisco Pix Firewall: The Cisco Pix Firewall normally restrict some protocol commandhttp,ftp,smtp and manage multisession protocolh323, ftp,sqlnet . I made some test on a BSDI3.0 running sendmail9 placed in the dmz . The Pi...
FreeBSD-SA-00:23.ip-options
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:23 Security Advisory FreeBSD, Inc. Topic: Remote denial-of-service in IP stack REVISED Category: core Module: kernel Announced: 2000-06-19 Revised: 2000-07-11 Affects:...