Filemaker Pro 5.0v3 and below does not adequately protect web-enabled databases

Overview FileMaker may expose data inadvertently. Description FileMaker Web Companion prior to version 5.0v4 permits unauthorized access to data even if the database manager believes that data is protected by Field Level Security. --- Impact Attackers can read information, including items such as...

(SRADV00007) Local root compromise through Lexmark MarkVision printer drivers

================================================= Secure Reality Pty Ltd. Security Advisory 7 SRADV00007 http://www.securereality.com.au ================================================= Title Local root compromise through Lexmark MarkVision printer drivers Released 6/11/2000 Vulnerable Versions...

SSH with Kerberos NFS Share Ticket Disclosure

The remote host is running a version of SSH which is older than or as old as version 1.2.27. There is a flaw in the remote version of this software which allows an attacker to eavesdrop the kerberos tickets of legitimate users of this service, as sshd will set their environment variable KRB5CCNAM...

MDaemon Connection Saturation Remote DoS

It was possible to crash the remote version of MDaemon by establishing a large number of connections to it. A remote attacker can exploit this to cause a denial of service. Note that due to the nature of this vulnerability, Nessus cannot be 100% positive on the effectiveness of this check. As a...

Xitami Web Server Administration Port Remote Overflow

The remote host is running a vulnerable version of the Xitami web server. An attacker could exploit this by sending a lot of data to TCP port 81. This could lead to the execution of arbitrary code in the context of the web server, or create a denial of service. C Tenable Network Security, Inc...

OmniHTTPd imagemap.exe CGI Remote Overflow

The 'imagemap.exe' cgi is installed. This CGI is vulnerable to a buffer overflow that will allow a remote user to execute arbitrary commands with the privileges of your httpd server either nobody or root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

libc.nul.byte.txt

Date: Wed, 14 Oct 1998 11:42:46 +0200 From: Olaf Kirch To: [email protected] Subject: The poisoned NUL byte Summary: you can exploit a single-byte buffer overrun to gain root privs. When, half a day after releasing version 2.2beta37 of the Linux nfs server, I received a message from Larry...

PT-1999-1028 · Hughes Technologies · Msql

Name of the Vulnerable Software and Affected Versions: mSQL versions 2.0.1 and below Description: The issue allows for remote execution through a buffer overflow. Recommendations: For versions 2.0.1 and below, update to a version above 2.0.1 to resolve the issue...

Sendmail IDENT Remote root Vulnerability

Description A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old vulnerability. Technologies Affected Eric Allman Sendmail 8.6.9 Upgrade to at least version...