2902 matches found
Possible problems with patch for MS00-086
A recent report http://www.securityfocus.com/archive/1/147109 suggests that; http://IISServer/scripts/somefile.bat/..C19C..C19C..C19Cwinnt/system32 /cmd.exe?/c20dir20C: wrapped might yield a directory listing on IIS 5.0 boxes that have applied the fix listed in Microsoft Security Bulletin MS00-08...
DCForum 1-6 - Arbitrary File Disclosure
DCForum 1-6 - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/1951/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. The script improperly validates user-supplied input, which allows the remote viewing ...
Redhat 6.2 dump command executes external program with suid priviledge.
Problem: Linux dump command executes external program with suid priviledge. 2. Tested Version dump-0.4b15 3. Example mat@localhost mat$ export TAPE=garbage:garbage mat@localhost mat$ export RSH=/home/mat/executethis mat@localhost mat$ cat /home/mat/executethis !/bin/sh cp /bin/sh /home/mat/sh...
CVE-2000-0792
Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...
Многочисленные дырки в LPC Windows 2000/NT
Возможны несколько DoS атак, кроме того, можно подменить LPC-запрос получив доступ к контексту локальной машины...
Notes default ECL allows execution of unsigned code
Overview Lotus Notes prior to version 5.02, had permissive ECLs that allow for the execution of malicious mail messages. Description A Notes ECL is a list consisting of a Notes Username and a set of permissions from the following list for Notes 4.6.x: Access to file system Access to current...
Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion
Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be...
IE 5.5 Cross Frame security vulnerability - Web Browser Control's Navigate method
Georgi Guninski security advisory 20, 2000 IE 5.5 Cross Frame security vulnerability - Web Browser Control's Navigate method Systems affected: IE 5.5/Win98. Probably other versions - have not tested. Risk: High Date: 4 September 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski...
Stalker's CGImail Gives Read Access to All Server Files
Stalker's CGImail Gives Read Access to All Server Files ------------------------------------------------------- Stalker Lab's Mailers package for Windows NT contains the CGImail.exe program, which is used to convert the contents of an HTML form to an email. The program takes a template file on th...
MS-SQL 'sa' user exploit code
Hi BugTraq-ers, It has come to light that it is now common knowledge that MS-SQL has a blank 'sa' password by default. This seems to affect a lot of servers on the internet. Since this knowledge has been made public by others, I'll release my program 'linsql' linux only -- ports anyone? which can...
snoop.servlet.txt
LoWNOISE Snoop Servlet Tomcat 3.1 and 3.0 ====PRODUCT: Snoop Servlet on Release Build 3.1 and 3.0 of Tomcat from Apache Software Foundation. http://jakarta.apache.org ====PROBLEM: The Snoop Servlet will give you too much info PATHs, OS, etc. ====EXPLOIT:...
Two issues: Blackboard CourseInfo 4.0 stores admin password in clear text; strange settings on the winreg key.
Hi, Russ. This is a big mess; I've got two different things for your consideration. Perhaps you can help me out. First of all, Blackboard CourseInfo 4.0 stores a local administrator username and password in clear text in the registry. Unless an administrator has hardened their registry against...
Дырки в XFree86
Многочисленные дырки, в том числе связанные с переполнением буфера, могут оказаться достаточно опасными...
IE 5 Cross-frame security vulnerability using IFRAME and WebBrowser control
Georgi Guninski security advisory 12, 2000 IE 5 Cross-frame security vulnerability using IFRAME and WebBrowser control Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski...
Sambar Server /sysadmin Default Accounts
The Sambar webserver is running. It provides a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete your files! this may be a false positive - go to...
Remote xploit for MDBMS
/ MDBMS V0.96b6 remote shell xploit 11/05/2000 |TDP| [email protected] - HaCk-13 TeaM This code shows a MDBMS v0.96b6 vulnerability in which, any remote user can exec a shell. MDBMS daemon used to be ran as root user; exposing the system to serious vulnerability risks, because any attacker can obtai...
nhc.kp.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII ,=wwmmm=, .,=""" "M ,gP" "& M & ,d" M, ,R "k ,P "k F W , Vk W '$ ,W M ,F M $ M J$ ,,,====,,, ,,,gP g'gM|| "MMw"""""" gP M@ k @ M@ MX5""""mP, || %,""ww==g' M 4k "" "MmwP , k &...
Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction
source: https://www.securityfocus.com/bid/1170/info Alladin Knowledge Systems eToken is a USB smartcard-like device used for authentication, file integrity, and encryption. Access to the eToken device itself and entering the PIN number encoded in the eToken will grant authorization to a local use...
Web Server No 404 Error Code Check
The remote web server is configured such that it does not return '404 Not Found' error codes when a nonexistent file is requested, perhaps returning instead a site map, search page or authentication page. Nessus has enabled some counter measures for this. However, they might be insufficient. If a...