440 matches found
CVE-2004-2759
Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files...
HP-UX SAM privilege escalation
No description provided...
security flaw
The processlogonpacket function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAMUASCHANGE request with a length value that is larger than the number of structures that are provided...
CVE-2002-1117
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...
RhinoSoft Serv-U FTPd Server 3.x4.x5.x - MDTM Remote Overflow
RhinoSoft Serv-U FTPd Server 3.x4.x5.x - MDTM Remote Overflow / exservu.c - Serv-U FTPD 3.x/4.x/5.x "MDTM" Command remote overflow exploit Copyright c SST 2004 All rights reserved. Public version BUG find by bkbll [email protected], cool! :ppPPppPPPpp :D code by Sam and 2004/01/07 Revise History...
CVE-2003-1143
Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service crash or freeze via a TCP packet with an invalid first parameter...
Serious Sam Engine 1.0.5 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the client sends a certain malformed parameter to the server...
Serious Sam Engine 1.0.5 - Remote Denial of Service
Serious Sam Engine 1.0.5 - Remote Denial of Service // source: https://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the clie...
CVE-2002-0462
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
CVE-2002-0462
CVE-2002-0462 affects bigsam_guestbook.php (Big Sam Built-In Guestbook Stand-Alone Module) version 1.1.08 and earlier. The vulnerability arises from a displayBegin parameter containing a very large number, which can cause denial of service via CPU consumption or leak the web server’s absolute pat...
Microsoft Windows XP weak permissions
Weak permissions for restore information allow to view and change sensitive data, including SAM...
CVE-2002-0462
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
[ARL02-A11] Big Sam (Built-In Guestbook Stand-Alone Module) Multiple Vulnerabilities
+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A11 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Big Sam Built-In Guestbook...
Syskey reuses keystream
Overview Versions of SYSKEY in use prior to December, 1999 leave the SAM database vulnerable to cryptanalytic attacks. Description SYSKEY is a utility introduced in Microsoft Windows NT 4.0 service pack 3 to provide strong cryptographic protection to the SAM password database. The protection SYSK...
CVE-1999-0435
CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...
CVE-1999-0435
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...
CVE-1999-0994
SYSKEY in Windows NT pre-December 1999 had a flaw that reuses part of an RC4 keystream to encrypt the SAM database. This enables dictionary attacks against SAM passwords if an attacker obtains a copy of the SAM database. Microsoft addressed this in December 1999 (MS99-056). The CERT advisory reit...
teamshare teamtrack 3.0 - Directory Traversal
teamshare teamtrack 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested...
teamshare teamtrack 3.0 - Directory Traversal
source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested paths containing the ../ sequence. Because of...