4548 matches found
OpenBB 1.0.0 RC3 - Cross-Site Scripting
OpenBB 1.0.0 RC3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4824/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. It has been reported that OpenBB is vulnerable to a cross-site...
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...
Проблемы в CDE с сохраненными сеансами xterm (privelege escalation)
No description provided...
ISSalert: ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
Microsoft Windows 2000 Telnet Service fails to enforce timeouts on idle telnet sessions
Overview The Microsoft Windows 2000 Telnet Service contains a denial-of-service vulnerability that allows remote attackers to disrupt the telnet service on affected servers. Description The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows a remote attacker to place idle...
CVE-1999-1150
The CVE-1999-1150 entry concerns Livingston Portmaster routers running ComOS that use the same initial sequence number (ISN) for TCP connections. This reuse allows remote attackers to spoof TCP connections and hijack sessions, as described in the provided description. The vulnerability is rated C...
DoS против Marconi (multiple connections DoS)
Поддерживается ограниченное число одновременных telnet-сеансов без таймаута авторизации...
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions...
Remote Desktop DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote Desktop 3.0 and previous DoS Affected: Win95/95/ME running Mcafee Remote Desktop 3.0 and below Problem: possible for remote attacker to crash Remote Desktop session. in some cases crashing the remote desktop agent. Desc: Remote desktop agent...
Дырка в маршрутизаторах Cisco (Initial TCP sequence number)
Неслучайная генерация начального номер последовательности в TCP позволяет перехватывать TCP-Сеансы...
eEye Digital Security IRIS 1.0.1 / SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet CaptureNet. Certain versions of the this software are vulnerable to a remotely triggered...
eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow
eEye Digital Security IRIS 1.0.1 SpyNet CaptureNet 3.0.12 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1627/info IRIS from eEye Digital Security is a protocol analyzer geared towards network management, it is currently in BETA. This product was formerly known as SpyNet...
RedHat Linux 6.06.16.2 - pam_console Monitor Activity After Logout
RedHat Linux 6.06.16.2 - pamconsole Monitor Activity After Logout / source: https://www.securityfocus.com/bid/1176/info A vulnerability exists in the pamconsole PAM module, included as part of any Linux system running PAM. pamconsole exists to own certain devices to users logging in to the consol...
Проблемы с маскарадингом в Linux
анализируя ICMP-ответы при сканировании портов, отведенных под маскарадинг по-умолчанию 61000 - 65096 можно обнаружить и перехватить активные UDP-сеансы...
PT-2000-1199 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. Recommendations: At the moment, the...
CVE-1999-0837
CVE-1999-0837 describes a denial-of-service in BIND caused by improperly closing TCP sessions via so_linger. The Red Hat entry and NVD confirm the issue; Nessus references indicate affected BIND versions and list remediation as upgrading to BIND 4.9.7-REL or 8.2.2-P5. The available documents do n...
CVE-1999-0428
CVE-1999-0428 affects OpenSSL and SSLeay, allowing remote attackers to reuse SSL sessions and bypass access controls. The OpenVAS NASL reference documents a vulnerability in OpenSSL = 0.9.8s as cited) to mitigate the vulnerability. If exploit details or affected product versions vary by entry, th...