File send interception in AIM

Durig file trasmitio icomig connection is accepted without additioal user or IP validation...

NetBSD 1.x - TalkD User Validation

NetBSD 1.x - TalkD User Validation source: https://www.securityfocus.com/bid/4419/info talkd is a client-server application shipped with many Unix and Linux variants that is used for communication between users locally or remotely. talkd does not perform adequate validation of users making talk...

NetBSD 1.x - 'TalkD' User Validation

source: https://www.securityfocus.com/bid/4419/info talkd is a client-server application shipped with many Unix and Linux variants that is used for communication between users locally or remotely. talkd does not perform adequate validation of users making talk requests. As a result, it is possibl...

[ARL02-A01] Vulnerability in Hosting Controller

+/--------------------- ALPER Research Labs --------/--- --------/+ +/--------------------- Security Advisory -------/---------- --/+ +/--------------------- ID: ARL02-A01 ------/----------- --/+ +/--------------------- [email protected] -----/------- -------/+ Advisory Information...

Amtote Homebet - Account Information Brute Force

source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of possible legitimate users and their PIN numbers...

CVE-1999-0990

Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system...

SGI IRIX 5.3 - 'Cadmin' Local Privilege Escalation

source: https://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these programs allow any user to edit protected files, such as...