2902 matches found
htimage info -- may apply to unix as well
I've spent some time looking at the htimage issue reported by [email protected], and have some additional info. First, the htimage.exe that comes with FrontPage appears to be a simple port of HTImage.c from the w3c-httpd distribution. You can view the source code at...
Cisco IOS Software TELNET Option Handling Vulnerability
...
IE 5 security vulnerablity - circumventing Cross-frame security policy using Java/JavaScript (and disabling Active Scripting is not that easy)
Georgi Guninski security advisory 10, 2000 IE 5 security vulnerablity - circumventing Cross-frame security policy using Java/JavaScript and disabling Active Scripting is not that easy Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual...
snmp.writable.txt
Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...
CVE-1999-0504
A Windows NT local user or administrator account has a default, null, blank, or missing password...
CVE-1999-0534
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single...
CVE-1999-0515
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv...
CVE-1999-0580
The HKEYLOCALMACHINE key in a Windows NT system has inappropriate, system-critical permissions...
CVE-1999-0629
The ident/identd service is running...
The Bat! X-BAT-FILES
"The Bat!" by RitLabs is extremely convenient mail agent with a lot of features for Windows platforms. One of "The Bat!" features is storing files attached to e-mail messages apart from messages bodies. In this case "The Bat!" puts attached files in preconfigured folder and removes according MIME...
CVE-2000-0109
The mcsp Client Site Processor system MultiCSP in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords...
CVE-1999-0714
Vulnerability in Compaq Tru64 UNIX edauth command...
solaris.dmispd.txt
Greetings, OVERVIEW Several holes in the Solaris 2.7 SPARC/x86 dmispd daemon will allow malicious users to do various DoS attacks and probably more. BACKGROUND I've only tested 2.7 with the latest patches as of this writing. dmispd is the "DMI service provider". I would appreciate if someone who...
mdaemon.2.8.5.0.txt
Multiples Remotes DoS Attacks in MDaemon Server v2.8.5.0 Vulnerability PROBLEM: UssrLabs found multiple places in MDaemon v2.8.5.0 where they do not use proper bounds checking. The following all result in a Denial of Service against the service in question. affected services: WorldClient: Port 20...
ie50.cross-frame.txt
Subject: IE 5.0 cross-frame vulnerabilities back again from: Francis Favorini Folks, It seems that after applying the IFRAME ExecCommand patch from MS9-042, IE 5.0 is again vulnerable to Georgi Guninski's cross-frame bugs. You can visit his page at to test. I tested this on 2 NTW 4.0 SP5 machines...
CVE-1999-0303
Buffer overflow in BNU UUCP daemon uucpd through long hostnames...
CVE-1999-0215
Routed allows attackers to append data to files...
os-fingerprinting.txt
Date: Mon, 28 Dec 1998 16:16:40 -0700 From: David G. Andersen To: [email protected] Subject: A few more fingerprinting techniques - time and netmask The release of nmap reminded me about some work I did a while ago for yet-more-information-gathering-programs, and I thought it might be...