9783 matches found
CVE-2000-0746
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting CSS attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those...
Group-writable executable in OpenLDAP
OpenLDAP installs the ud binary in $binpath with mode 775 and default group i.e. either you primary gid or the directories gid. Of course the consequences depend on which group this actually is. This was checked with 1.2.11 latest stable, but probably also exists in earlier versions, since the...
Security Bulletin (MS00-039)
Microsoft Security Bulletin MS00-039 - -------------------------------------- Patch Available for "SSL Certificate Validation" Vulnerabilities Originally posted: June 05, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities in Microsoftr Internet...
NAI WebShield SMTP GET_CONFIG Information Disclosure
The remote NAI WebShield SMTP Management tool gives away its configuration when it is issued the command : GETCONFIG This may be of some use to an attacker to gain more knowledge about this system. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10424; scriptversion...
CVE-2000-0159
CVE-2000-0159 affects HP Ignite-UX. The issue: when imaging a trusted system, Ignite-UX does not save /etc/passwd, which can leave the password field blank and enable privilege escalation. The description and connected documents confirm the vulnerable component and the underlying behavior, but do...
CVE-1999-0992
HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy TGP...
CVE-1999-0992
CVE-1999-0992 affects HP VirtualVault with the PHSS_17692 patch. The issue is a bypass of access restrictions via the Trusted Gateway Proxy (TGP), enabling unprivileged processes to gain restricted access. The vulnerability is tied to HP VirtualVault and the TGP configuration as described in the ...
CVE-1999-0992
HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy TGP...
Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag
Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT...
[SECURITY] New version of sendmail-wide released
The version of sendmail-wide that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the...
[SECURITY] New version of sendmail released
The version of sendmail that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the syst...
[SECURITY] New version of sendmail released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...
[SECURITY] New version of sendmail-wide released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail-wide that was...
Traceroute Information
Makes a traceroute to the remote host. TRUSTED...
Nessus Server Detection
A Nessus daemon is listening on the remote port." "Note: This plugin only attempts to log in to the remote device to detect the version, if valid Nessus credentials are configured. TRUSTED...
SSH Server Type and Version Information
It is possible to obtain information about the remote SSH server by sending an empty authentication request. TRUSTED...
excel.macro.virus.protect.txt
Date: Mon, 29 Mar 1999 12:51:09 -0500 From: rotaiv To: [email protected] Subject: Bypassing Excel Macro Virus Protection -----BEGIN PGP SIGNED MESSAGE----- With the sudden attention macro viruses have received over the weekend, I thought I would share a couple of items I find concerning with...
hp.vvos.tgad.dos.txt
TGAD DoS VirtualVault Overview The VirtualVault operating system is HP's solution to secure electronic commerce. It is a B1 and B2 DoD compliant system that is becoming increasingly popular with big business, banks, etc., The main security mechanism in which VVOS is based upon is data partitionin...
Ping the remote host
Nessus was able to determine if the remote host is alive using one or more of the following ping types : - An ARP ping, provided the host is on the local subnet and Nessus is running over Ethernet. - An ICMP ping. - A TCP ping, in which the plugin sends to the remote host a packet with the flag...