1558 matches found
Многочисленные проблемы в EFTP (multiple bugs)
ОБратный путь в директориях, пароли в открытой форме, переполнения буфера, информация о системе и т.д...
CVE-2001-0687
Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by 1 issuing a CD command CD C: followed by the LS command, 2 specifying arbitrary paths in the UNC format \computername\sharename...
Groupwise Webaccess, NetWare web server, and Novell
No idea if this is what the Groupwise Padlock http://www.novell.com/padlock thing is about, since Novell is not only vague in the issues, but never acknowledged Adept's findings. - Simple Nomad - "No rest for the Wicca'd" - - [email protected] - - - [email protected] - www.nmrc.org...
CVE-2001-1434
Cisco IOS 12.05XU through 12.12 allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created...
IBM Net.Commerce 2.03.x4.x - orderdspc.d2w order_rn Option SQL Injection
IBM Net.Commerce 2.03.x4.x - orderdspc.d2w orderrn Option SQL Injection source: https://www.securityfocus.com/bid/2350/info IBM's Net.Commerce ecommerce platform supports macros which, by default, do not properly validate requests in user-supplied input. A thoughtfully-formed request to a...
CVE-2000-0283
The vulnerability CVE-2000-0283 affects IRIX Performance Copilot (pmcd daemon). In default installations, remote attackers could access sensitive system information via pmcd, leading to partial confidentiality impact. The issue is tied to the service exposing data; the documented remediation is t...
CVE-2000-0905
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page...
Phorum 3.x - Arbitrary File Read
Phorum 3.x - Arbitrary File Read source: https://www.securityfocus.com/bid/1997/info Phorum is a PHP based web forums package. Due to an error in the handling of user input in administrative scripts, any user can view the any file readable by the webserver on the target host. This is due to...
Phorum 3.x - Arbitrary File Read
source: https://www.securityfocus.com/bid/1997/info Phorum is a PHP based web forums package. Due to an error in the handling of user input in administrative scripts, any user can view the any file readable by the webserver on the target host. This is due to user-supplied input being referenced a...
Solaris/SPARC 2.7 / 7 locale - Format String
/ Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse Assistant Editor, Phreedom Magazine http://www.phreedom.org 10 Oct 2000 / include include defi...
BindView RAZOR Advisory: Novell Netware
I contacted Novell about this and they feel the recommendations section is fine the way it is. No patch, just configuration issues. The seriousness can probably best be assessed by running the NCPQuery tool against your Netware servers that are running IP. Probably the most interesting thing is t...
CVE-2000-0057
Allaire ColdFusion 4.x CFCACHE exposes HTML output by creating temporary .tmp files and a cfcache.map pointing to them, stored in the web root and accessible remotely. Affected products include ColdFusion Server 4.0.x with multiple OSs listed; remediation exists via Allaire Security Bulletin ASB0...
Дырка в Perfomance Copilot
В установке по-умолчанию разрешен удаленный доступ со всех машин, что позволяет удаленно получать информацию о системе. Кроме того через него можно организовать DoS-атаку, послав в порт TCP/4321 большой объем данных...
CVE-2000-0283
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...
CVE-1999-0795
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...
CVE-2000-0057
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information...