4654 matches found
EFTP 2.0.7 337 - Remote Buffer Overflow Code Execution / Denial of Service
// source: https://www.securityfocus.com/bid/3330/info Encrypted FTP EFTP is both an FTP client and server application for Windows platforms. A malicious user with upload permissions to the target host can cause a buffer overflow in EFTP to execute code of the attacker's choosing. The attacker ca...
Проблемы с Java Plugin 1.4 (file reading)
Апплеты не имеющие корректного сертификата тем не менее могут обращаться к файловой системе...
Microsoft IIS .IDA ISAPI Filter Enabled
The IIS server appears to have the .IDA ISAPI filter mapped. At least one remote vulnerability has been discovered for the .IDA indexing service filter. This is detailed in Microsoft Advisory MS01-033, and gives remote SYSTEM level access to the web server. It is recommended that even if you have...
Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (4)
source: https://www.securityfocus.com/bid/2880/info Windows Index Server ships with Windows NT 4.0 Option Pack; Windows Indexing Service ships with Windows 2000. An unchecked buffer resides in the 'idq.dll' ISAPI extension associated with each service. A maliciously crafted request could allow...
IPSwitch IMail 6.06 SMTP Remote System Access Vulnerability
IPSwitch IMail 6.06 SMTP Remote System Access Vulnerability Release Date: April 24, 2001 Severity: High Systems Affected: Systems running IPSwitch's IMail 6.06 SMTP daemon. Prior versions are most likely vulnerable. Description: There exists a vulnerability within IMail that allows remote attacke...
Проблемы в файловых системах (ufs/ext2fs data recovery)
Локальный пользователь может получить доступ к содержимому файлов, которые были удалены...
eXtropia bbs_forum.cgi 1.0 - Arbitrary Command Execution
eXtropia bbsforum.cgi 1.0 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2177/info bbsforum.cgi is a popular Perl cgi script from eXtropia.com. It supports the creation and maintenance of web-based threaded discussion forums. Version 1.0 of bbsforum.cgi fails to properly...
XATO Advisory: Win32 Command-Line Mailers
---------------------------------------------------------------------------- Xato Network Security, Inc. www.xato.net Security Advisory XATO-122000-01 December 12, 2000 - MULTIPLE VENDOR COMMAND-LINE MAILER HOLES - SMTP Command-Line Mailers on Win32 Web Servers...
Leif M. Wright - ad.cgi 1.0 Unchecked Input
Leif M. Wright - ad.cgi 1.0 Unchecked Input source: https://www.securityfocus.com/bid/2103/info ad.cgi is an ad rotation script freely available, and written by Leif Wright. A problem exists in the script which may allow access to restricted resources. The problem occurs in the method in which th...
IIS ASP $19.95 hack - IISHack 1.5
IIS ASP $19.95 hack - IISHack 1.5 Release Date: November 3rd, 2000 Systems Affected: Windows NT 4.0 IIS 4.0 sp6 vulnerable Windows NT 5.0 IIS 5.0 not vulnerable Description: There exists a buffer overflow, that can be exploited to gain SYSTEM level access, within the IIS Internet Information Serv...
ISSalert: Internet Security Systems Security Advisory: Vulnerability in the Oracle Listener Program
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
Ipswitch IMail 6.x - File Attachment
source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 for it's end users to access. Via th...
Brown Orifice HTTPD Directory Traversal Vulnerability (was Re: Dangerous Java/Netscape Security Hole)
===================================================== Brown Orifice HTTPD Directory Traversal Vulnerability ===================================================== Background ---------- Brown Orifice HTTPD BOHTTPD http://www.brumleve.com/BrownOrifice/ is "a web server and file sharing tool" that ru...
Fixed in Apache Tomcat 3.2
Low: Information disclosure CVE-2000-0759 Requesting a JSP that does not exist results in an error page that includes the full file system page of the current context. Affects: 3.1 Important: Information disclosure CVE-2000-0672 Access to the admin context is not protected. This context allows an...
University of Washington pop2d 4.464.514.544.55 - Remote File Read
University of Washington pop2d 4.464.514.544.55 - Remote File Read source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap...
CVE-2000-0441
The CVE-2000-0441 entry concerns a vulnerability in AIX 3.2.x and 4.x where local users can gain write access to files on locally or remotely mounted AIX filesystems. The available sources (NVD/CVE lists) describe the affected platforms and the local-write impact but do not provide root-cause tec...
Sean MacGuire Big Brother 1.x - Directory Traversal
source: https://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system. Executing a GET request for:...
Intel Corporation NetStructure 7110 - Undocumented Password
source: https://www.securityfocus.com/bid/1182/info NetStructure formerly known as Ipivot Commerce Accelerator is a multi-site traffic director. This internet equipment is designed for businesses with multiple Web site locations, routing traffic to the best available site from a single URL. Certa...
CVE-1999-0495
CVE-1999-0495 describes a remote path traversal vulnerability where an attacker can access a file system by using .. (dot dot) when interacting with SMB shares. The underlying cause is directory traversal over SMB, enabling disclosure or modification of sensitive data with complete impact on conf...
