Security Bulletin (MS00-039)

Microsoft Security Bulletin MS00-039 - -------------------------------------- Patch Available for "SSL Certificate Validation" Vulnerabilities Originally posted: June 05, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities in Microsoftr Internet...

NAI WebShield SMTP GET_CONFIG Information Disclosure

The remote NAI WebShield SMTP Management tool gives away its configuration when it is issued the command : GETCONFIG This may be of some use to an attacker to gain more knowledge about this system. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10424; scriptversion...

CVE-2000-0159

CVE-2000-0159 affects HP Ignite-UX. The issue: when imaging a trusted system, Ignite-UX does not save /etc/passwd, which can leave the password field blank and enable privilege escalation. The description and connected documents confirm the vulnerable component and the underlying behavior, but do...

CVE-1999-0992

HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy TGP...

CVE-1999-0992

HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy TGP...

CVE-1999-0992

CVE-1999-0992 affects HP VirtualVault with the PHSS_17692 patch. The issue is a bypass of access restrictions via the Trusted Gateway Proxy (TGP), enabling unprivileged processes to gain restricted access. The vulnerability is tied to HP VirtualVault and the TGP configuration as described in the ...

Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag

Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT...

[SECURITY] New version of sendmail-wide released

The version of sendmail-wide that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the...

[SECURITY] New version of sendmail released

The version of sendmail that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the syst...

[SECURITY] New version of sendmail-wide released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail-wide that was...

[SECURITY] New version of sendmail released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...

Traceroute Information

Makes a traceroute to the remote host. TRUSTED...

Nessus Server Detection

A Nessus daemon is listening on the remote port." "Note: This plugin only attempts to log in to the remote device to detect the version, if valid Nessus credentials are configured. TRUSTED...

SSH Server Type and Version Information

It is possible to obtain information about the remote SSH server by sending an empty authentication request. TRUSTED...

excel.macro.virus.protect.txt

Date: Mon, 29 Mar 1999 12:51:09 -0500 From: rotaiv To: [email protected] Subject: Bypassing Excel Macro Virus Protection -----BEGIN PGP SIGNED MESSAGE----- With the sudden attention macro viruses have received over the weekend, I thought I would share a couple of items I find concerning with...

hp.vvos.tgad.dos.txt

TGAD DoS VirtualVault Overview The VirtualVault operating system is HP's solution to secure electronic commerce. It is a B1 and B2 DoD compliant system that is becoming increasingly popular with big business, banks, etc., The main security mechanism in which VVOS is based upon is data partitionin...

Ping the remote host

Nessus was able to determine if the remote host is alive using one or more of the following ping types : - An ARP ping, provided the host is on the local subnet and Nessus is running over Ethernet. - An ICMP ping. - A TCP ping, in which the plugin sends to the remote host a packet with the flag...

CVE-1999-1467

Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user...

Security update 1970-01-01

...

Windows Internet Explorer 9 for Windows Vista for x64-based systems

Windows Internet Explorer 9 delivers web sites and applications that look and perform like native PC applications through the power of Windows. Fast: Internet Explorer 9 is all-around fast. Designed to take full advantage of your PC’s hardware through Windows, Internet Explorer 9 delivers...