phpBB 1.4 - SQL Query Manipulation

phpBB 1.4 - SQL Query Manipulation source: https://www.securityfocus.com/bid/3142/info phpBB is free, open-source, easy-to-use web forums software. An issue exists in phpBB which allows a remote attacker to manipulate SQL queries in such a way as to gain an administrative account with the service...

SnapStream PVS 1.2 - Plaintext Password

SnapStream PVS 1.2 - Plaintext Password source: https://www.securityfocus.com/bid/3101/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream...

SECURITY.NNOV: Netscape 4.7x Messanger user information retrival

There are known bugs in Netscape which require information on user's files location. This bug is not serious one, but it allows to get this location. Topic : Netscape 4.7x user information retrival Author : 3APA3A [email protected] Affected software : Netscape 4.7x All Platforms Vendor :...

@stake Security Advisory: iPlanet Web Server 4.x Response Header Overflow (A041601-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: iPlanet Web Server Enterprise Edition 4.0, 4.1 Response Header Overflow Release Date: 04/16/2001 Application: iPlanet Web Server Enterprise Edition 4.0, 4.1 Platform: Solaris...

rdC270201.adv.en

r 0 t t e n d e v 1 c e C r e w r0tten dev1ce Crew A r g e n t i n i a n S e c u r i t y G r o u p Argentinian Security Group ---------------------------------------:2:3:4:5:6:7:8:eee" | uuencode -m f begin-base64 644 f MDpBbm9ueW1vdXM6MjozOjQ6NTo2Ojc6ODplZWUK lynx...

CVE-2000-0936

Samba Web Administration Tool SWAT in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords...

Microsoft Windows LAN Manager SNMP LanMan Users Disclosure

It is possible to obtain the list of LanMan users on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.25.1.1 An attacker may use this information to gain more knowledge about the target host. TRUSTED...

Allmanage.pl Admin Password vulnerability

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...

allmanage.pl-admin.txt

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...

Timbuktu v3.0 and Public LDAP Server

Timbuktu v3.0 by Netopia, for those who don't know, is a remote control software package for Windows 9x, NT, and the Macintosh that gives you GUI console access. LDAP support was recently introduced to make it easier to find machines that have Timbuktu on them in your enterprise. This is good and...

CVE-1999-1009

The CVE-1999-1009 entry concerns Disney Go Express; a vulnerability where remote attackers can access and modify a user’s search information by connecting to an HTTP server on the user’s system. The connected PT-1999-1526 entry reiterates Disney Go Express as affected, but does not specify affect...

CVE-1999-0490

MSHTML.DLL in Internet Explorer 5.0 is affected by CVE-1999-0490. The vulnerability enables a remote attacker to cause information disclosure by using an IMG SRC tag to learn local file information. The documented impact is partial disclosure of data from the target user’s files, with network-bas...

CVE-1999-0626

CVE-1999-0626 concerns the RPC rusersd service, where a version of rusers exposes valid user information to any entity on the network. Multiple connected sources confirm user-name enumeration/information disclosure via rusersd (e.g., OpenVAS description of a user-name enumeration vulnerability an...

CVE-1999-0612

A version of finger is running that exposes valid user information to any entity on the network...

CVE-1999-0628

The rwho/rwhod service is running, which exposes machine status and user information...

CVE-1999-0628

The CVE-1999-0628 issue involves the rwho/rwhod service, which exposes machine status and user information. Documents reference the vulnerable component as the rwho/rwhod service; no specific product/vendor/version is named. The impact description indicates partial confidentiality exposure, with ...

GNU Ffingerd 1.19 - 'Username' Validity Disclosure

source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has declined to be open to finger requests, a...

anonymizers+java+javascript.txt

Date: Tue, 13 Apr 1999 20:14:49 +0200 From: Patrick Oonk To: [email protected] Subject: Serious security holes in web anonimyzing services From: "Richard M. Smith" Subject: Serious security holes in Web anonymizing services Date: Sun, 11 Apr 1999 19:23:25 -0400 Newsgroups: comp.security.misc...

shockwave.7.txt

Date: Thu, 11 Mar 1999 13:53:41 -0400 From: Sean Coates To: [email protected] Subject: Fwd: Shockwave 7 Security Hole I just got this off a Lingo programming list Macromedia Director 7 scripting. Thought the Bugtraq community might appreciate it. -Sean Coates [email protected] Date: Thu, 11...

wingate.hijack.txt

Date: Tue, 9 Mar 1999 16:37:49 -0800 To: [email protected] Subject: Hacking USER's email with WinGate, lack of security on some ISPs Found out something to read some emails on my ISP, maybe this will work with other people if the ISP's site works just like mine... It consists that, i...