278 matches found
CVE-2005-0854
The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...
Debian DSA-266-1 : krb5 - several vulnerabilities
Several vulnerabilities have been discovered in krb5, an implementation of MIT Kerberos. - A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4...
ISC BIND Version 4 Detection (deprecated)
Binary data 1014.prm...
NTP service vulnerable to internal overflow if date / time offset is greater than 34 years
Overview NTP Network TIme Protocol contains an integer overflow vulnerability that may lead to clients receiving an incorrect date/time offset. Description NTP Network Time Protocol is a method by which client machines can synchronize the local date and time with a reference server. The server wi...
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...
Cryptographic weakness in Kerberos Version 4 protocol
Overview Several cryptographic vulnerabilities exist in the basic Kerberos Version 4 protocol that could allow an attacker to impersonate any user in a Kerberos realm and gain any privilege authorized through that Kerberos realm. Description The MIT Kerberos Development team has discovered a...
Kerberos v4 cryptographic weakness
Several cryptographic vulnerabilities exist in the basic Kerberos Version 4 protocol that could allow an attacker to impersonate any user in a Kerberos realm...
CVE-2000-0967
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs...
AIX 4.24.3 - netstat -Z Statistic Clearing
AIX 4.24.3 - netstat -Z Statistic Clearing source: https://www.securityfocus.com/bid/1660/info A vulnerability exists in versions 4.x. x of AIX, from IBM. Any local user can utilize the -Z command to netstat, without needing to be root. This will cause interface statistics to be reset. This could...
ipop3d.4.xx.lockfile.DoS.txt
Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Lockfile vunerability in ipop3d 4.xx The problem is probably well known, but silently ignored by pine vendors. Unfortunately, it's possible to turn 'mostly harmless feature' in something nasty - following code allows various DoSes by...
FreeBSD-SA-96:12.perl
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:12 Security Advisory FreeBSD, Inc. Topic: security compromise from perl suidperl utility Category: core and ports Module: perl Announced: 1996-06-28 Affects: FreeBSD 2.0,...
Bing Bar IP2 4-5
...
Bing Bar WEA 4-5
...
Bing Bar GM6 4-5
...
HIS.ESSO.V4.FRA
FRA Product Locale...
Bing Bar DMD 4-5
...