Update: Microsoft Security Bulletin (MS00-086)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-086 - -------------------------------------- Patch...

RealServer /admin/includes/ Remote Memory Content Disclosure

The remote Real Server discloses the content of its memory when issued the request : GET /admin/includes/ This information may be used by an attacker to obtain administrative control on this server, or to gain more knowledge about it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script...

Rideway PN Telnet DoS

Strumpf Noir Society Advisories ! Public release ! -- -= Rideway PN Telnet DoS =- Release date: Tuesday, November 14, 2000 Introduction: RideWay PN is a proxy server application that enables multiple users to share resources and files and that allows users to access the Internet simultaneously...

Small HTTP Server 2.0 1 - Non-Existent File Denial of Service

source : https://www.securityfocus.com/bid/1941/info Small HTTP Server is a full service web server. This utility is less than 30Kb and requires minimal system resources. Small HTTP Server is subject to a denial of service. When making an http request without a filename specified the server will...

Security Bulletin (MS00-087)

Microsoft Security Bulletin MS00-087 - -------------------------------------- Patch Available for "Terminal Server Login Buffer Overflow" Vulnerability Originally posted: November 08, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Window...

Unify eWave ServletExec 3.0 c - Denial of Service

source: https://www.securityfocus.com/bid/1868/info Unify eWave ServletExec is a Java/Java Servlet engine plug-in for major web servers such as Microsoft IIS, Apache, Netscape Enterprise Server, etc. eWave ServletExec is susceptible to a denial of service attack if a URL invoking the ServletExec...

Дырка в игровых серверах HalfLife

Очевидно, переполнение буфера в программе удаленного управления. Детали пока не опубликованы...

CVE-2000-0774

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root...

Заткнута дырка в IIS (File Permission Canonicalization, Web Server Folder Traversal)

При определенных условиях со специальным образом сконструированной URL доступ к файлу может быть произведен с разрешениями на директорию, вместо разрешений на файл. Кроме того, можно обратиться к любому файлу на диске используя unicode-кодирование в URL...

Half-Life Dedicated Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Vulnerability Report by Mark Cooper Date Published: 16th October 2000 Advisory ID: N/A Bugtraq ID: 1799 http://www.securityfocus.com/bid/1799 CVE CAN: N/A Title: Half-Life Dedicated Server Vulnerability Class: Buffer Overflow Remotely Exploitable: Yes Locally...

Bytes Interactive Web Shopper shopper.cgi Traversal Arbitrary File Access

The remote host contains is running Byte's Interactive Web Shopper, a shopping cart application. The installed version allows for retrieval of arbitrary files from the web server. %NASLMINLEVEL 70300 This script was written by Thomas Reinke See the Nessus Scripts License for details Changes by...

Evolvable Shambala Server 4.5 - Denial of Service

Evolvable Shambala Server 4.5 - Denial of Service source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection...

Evolvable Shambala Server 4.5 - Denial of Service

source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection requests. Successful exploitation could lead to...

Microsoft IIS 5.0 - Indexed Directory Disclosure

source: https://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed Authoring and Versioning WebDAV...

Дырка в scohelphttp (Unixware 7)

Обратный путь в директориях позволяет получить любой файл с сервера...

Unixware 7.0 - SCOhelp HTTP Server Format String

source: https://www.securityfocus.com/bid/1717/info SCO Unixware 7 default installation includes scohelp, an http server that listens on port 457/tcp and allows access to manual pages and other documentation files. The search CGI script provided for that purpose has a vulnerability that could all...

CVE-2000-0680

The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action...

SuSE Linux 6.36.4 - Installed Package Disclosure

SuSE Linux 6.36.4 - Installed Package Disclosure source: https://www.securityfocus.com/bid/1707/info By submitting a specific url to the web server "http://hosts.any/doc/packages/" , any user from any host may obtain a list of packages installed on a S.u.S.E 6.3 or 6.4 system. This problem is due...

Web Server HTTP Authorization Header Remote Overflow

It may be possible to make the web server crash or execute arbitrary code by sending it an authorization string which is too long. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists This is more of a generic test...

Sambar Server ISAPI Search Utility search.dll Arbitrary Directory Listing

The 'search.dll' CGI that comes with Sambar server can be used to obtain a listing of the remote web server directories even if they have a default page, such as index.html. This allows an attacker to gain valuable information about the directory structure of the remote host and could reveal the...