CVE-2000-0936

Samba Web Administration Tool SWAT in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords...

Microsoft Windows LAN Manager SNMP LanMan Users Disclosure

It is possible to obtain the list of LanMan users on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.25.1.1 An attacker may use this information to gain more knowledge about the target host. TRUSTED...

Allmanage.pl Admin Password vulnerability

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...

allmanage.pl-admin.txt

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...

Timbuktu v3.0 and Public LDAP Server

Timbuktu v3.0 by Netopia, for those who don't know, is a remote control software package for Windows 9x, NT, and the Macintosh that gives you GUI console access. LDAP support was recently introduced to make it easier to find machines that have Timbuktu on them in your enterprise. This is good and...

CVE-1999-1009

The CVE-1999-1009 entry concerns Disney Go Express; a vulnerability where remote attackers can access and modify a user’s search information by connecting to an HTTP server on the user’s system. The connected PT-1999-1526 entry reiterates Disney Go Express as affected, but does not specify affect...

CVE-1999-0490

MSHTML.DLL in Internet Explorer 5.0 is affected by CVE-1999-0490. The vulnerability enables a remote attacker to cause information disclosure by using an IMG SRC tag to learn local file information. The documented impact is partial disclosure of data from the target user’s files, with network-bas...

CVE-1999-0612

A version of finger is running that exposes valid user information to any entity on the network...

CVE-1999-0626

CVE-1999-0626 concerns the RPC rusersd service, where a version of rusers exposes valid user information to any entity on the network. Multiple connected sources confirm user-name enumeration/information disclosure via rusersd (e.g., OpenVAS description of a user-name enumeration vulnerability an...

CVE-1999-0628

The rwho/rwhod service is running, which exposes machine status and user information...

CVE-1999-0628

The CVE-1999-0628 issue involves the rwho/rwhod service, which exposes machine status and user information. Documents reference the vulnerable component as the rwho/rwhod service; no specific product/vendor/version is named. The impact description indicates partial confidentiality exposure, with ...

GNU Ffingerd 1.19 - 'Username' Validity Disclosure

source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has declined to be open to finger requests, a...

anonymizers+java+javascript.txt

Date: Tue, 13 Apr 1999 20:14:49 +0200 From: Patrick Oonk To: [email protected] Subject: Serious security holes in web anonimyzing services From: "Richard M. Smith" Subject: Serious security holes in Web anonymizing services Date: Sun, 11 Apr 1999 19:23:25 -0400 Newsgroups: comp.security.misc...

shockwave.7.txt

Date: Thu, 11 Mar 1999 13:53:41 -0400 From: Sean Coates To: [email protected] Subject: Fwd: Shockwave 7 Security Hole I just got this off a Lingo programming list Macromedia Director 7 scripting. Thought the Bugtraq community might appreciate it. -Sean Coates [email protected] Date: Thu, 11...

wingate.hijack.txt

Date: Tue, 9 Mar 1999 16:37:49 -0800 To: [email protected] Subject: Hacking USER's email with WinGate, lack of security on some ISPs Found out something to read some emails on my ISP, maybe this will work with other people if the ISP's site works just like mine... It consists that, i...

CVE-1999-0628

The rwho/rwhod service is running, which exposes machine status and user information...

CVE-1999-0612

A version of finger is running that exposes valid user information to any entity on the network...

PT-1997-1164 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue exposes valid user information to any entity on the network due to a version of finger being run. Recommendations: At the moment, there is no information about a newer version that...

CVE-1999-0626

A version of rusers is running that exposes valid user information to any entity on the network...

PT-1997-1165 · Rusers · Rusers

Name of the Vulnerable Software and Affected Versions: rusers affected versions not specified Description: The issue exposes valid user information to any entity on the network due to a version of rusers being run. Recommendations: At the moment, there is no information about a newer version that...