Sendmail Trojan Horse Vulnerability

Description Reportedly, the server hosting sendmail, ftp.sendmail.org, was compromised recently. It has been reported that the intruder made modifications to the source code of sendmail to include Trojan Horse code. Downloads of the sendmail source code from ftp.sendmail.org between September 28,...

Sendmail 8.12.6 - Compromised Source Backdoor

source: https://www.securityfocus.com/bid/5921/info Reportedly, the server hosting sendmail, ftp.sendmail.org, was compromised recently. It has been reported that the intruder made modifications to the source code of sendmail to include Trojan Horse code. Downloads of the sendmail source code fro...

CVE-2002-0470

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path...

CVE-2002-0529

HP Photosmart printer driver for Mac OS X installs the hpimagingconnectivity program and the hpimagingconnectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hpimagingconnectivity with a Trojan horse...

CVE-2002-0532

EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...

SECURITY.NNOV: Windows 2000 system partition weak default permissions

Title: Windows 2000 system partition weak default permissions Affected: Windows 2000 Vendor: Microsoft Author: ZARAZA [email protected] Date: August, 03 2002 Risk: Average Exploitable: Yes Remote: No Vendor notified: few months ago SECURITY.NNOV URL: http://www.security.nnov.ru Advanced inf...

CVE-2002-0671

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing...

PT-2002-1697 · Pingtel · Pingtel Xpressa

Name of the Vulnerable Software and Affected Versions: Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4 Description: The issue allows remote attackers to install Trojan horse applications via DNS spoofing because the phone downloads applications from a web site but...

CVE-2002-0676

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates...

CVE-2001-1345

The CVE concerns bctool in Jetico BestCrypt 0.7 and earlier, which trusts a user-supplied PATH to locate and execute an fsck utility. This PATH manipulation allows local users to gain privileges by renaming or placing a Trojan horse program earlier in PATH. Affected component: bctool within Jetic...

CVE-2002-0317

Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...

CVE-2002-0340

Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...

CVE-2002-0529

HP Photosmart printer driver for Mac OS X installs the hpimagingconnectivity program and the hpimagingconnectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hpimagingconnectivity with a Trojan horse...

CVE-2002-0470

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path...

CVE-2002-0529

The CVE-2002-0529 entry concerns HP Photosmart printer driver for Mac OS X. The vulnerability arises because the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory are installed with world-writable permissions, enabling a local user to replace the executable with a Troj...

Unauthorized access to PowerChute shared folder

During programm installation Program FilesPwrchute shared with full access allowing to trojan program executables...

CVE-2002-0317

Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...

CVE-2001-1238

Task Manager in Windows 2000 cannot end certain processes with uppercase names (e.g., winlogon.exe, csrss.exe, smss.exe, services.exe) via the Process tab. This could allow local users to install Trojan horses that cannot be stopped with Task Manager. Documents do not provide a fix or patch; PT-S...

CVE-2002-0340

CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...

CVE-2001-1238

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named 1 winlogon.exe, 2 csrss.exe, 3 smss.exe and 4 services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager...