6582 matches found
Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access
Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access source: https://www.securityfocus.com/bid/5276/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. BadBlue does not sufficiently...
RCS public file sharing vulnerability
Hi, This is a vulnerability Andreas and I found about eight weeks ago. This was then first reported to the vendor and CERT. CERT received it on 5/10/02 at 8:01pm. They haven't yet done anything with it as far as I can tell. - I haven't received anything from them except for the automated response...
Working Resources BadBlue 1.7.3 - cleanSearchString() Cross-Site Scripting
Working Resources BadBlue 1.7.3 - cleanSearchString Cross-Site Scripting source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web...
Working Resources BadBlue 1.7 - 'ext.dll' Cross-Site Scripting
source: https://www.securityfocus.com/bid/5086/info BadBlue is a P2P file sharing application distributed by Working Resources. The ext.dll ISAPI does not sufficiently sanitize input. Because of this, it is possible for a user to create a custom URL containing script code that, when viewed in a...
Working Resources BadBlue 1.7 - ext.dll Cross-Site Scripting
Working Resources BadBlue 1.7 - ext.dll Cross-Site Scripting source: https://www.securityfocus.com/bid/5086/info BadBlue is a P2P file sharing application distributed by Working Resources. The ext.dll ISAPI does not sufficiently sanitize input. Because of this, it is possible for a user to create...
eDonkey Detection
The remote host appears to be running eDonkey or one of its variants, which is commonly used for sharing music, films, and software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid11022; scriptversion"1.30";...
Microsoft Windows SMB Service Detection
The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...
Gnutella Servent Detection
The remote host is running a Gnutella 'servent', a P2P file sharing application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid10946; scriptversion"1.34"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2001-0503
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability...
CVE-2001-0503
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled is affected by CVE-2001-0503, where a remote attacker can cause a denial of service by sending a malformed string to the NetMeeting service port (a variant of the NetMeeting Desktop Sharing vulnerability). The available sources confirm...
CVE-1999-1105
CVE-1999-1105 affects Windows 95 when Remote Administration and File Sharing for NetWare Networks is enabled. The vulnerability arises because a share (C$) is created upon remote administrator login, enabling a remote attacker to read arbitrary files by mapping the network drive. The available so...
CVE-1999-1105
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...
BadBlue XSS vulnerabilities / Filesharing Server Worm
Strumpf Noir Society Advisories ! Public release ! -- -= BadBlue XSS vulnerabilities / Filesharing Server Worm =- Release date: Tuesday, February 26, 2002 Introduction: BadBlue is the technology behind Working Resources Inc.'s product line with the same name and which, amongst other things, also...
CVE-2001-1004
Affected software: gnut Gnutella client prior to 0.4.27. Vulnerability: cross-site scripting via file names containing script tags shared with other clients. Root cause: untrusted file-name content is rendered as script on recipients. Impact: remote script execution on other clients (as described...
[resend] Strumpf Noir Society on BadBlue
Strumpf Noir Society Summaries ! Public release ! -- -= Strumpf Noir Society on BadBlue =- Sorry, couldn't resist.. Ok, so we might not be able to actually drive a Mach truck, but this seems to do the trick, give or take a few millions : Release date: Thursday, January 17, 2002 Introduction BadBl...
CVE-2001-1575
Apple Personal Web Sharing PWS 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow...
Microsoft Windows 98/XP/ME - UPnP NOTIFY Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, it is available with Windows XP's Internet Connection...
Многочисленные проблемы в Load Sharing Facility
Символьные линки, несанкционированное чтение файлов и т.д...
Many vulnerabilities in LSF 4.0
Hello. Load Shareing Facility from Platform http://www.platform.com is a suite of application resource management products that schedule, monitor and analyze the workload for a network of computers. In April 2001 I discovered some security bugs in it. I posted my exploits with technical details t...