2912 matches found
CVE-2000-0330
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability...
CVE-1999-0277
The WorkMan program can be used to overwrite any file to get root access...
CVE-1999-0100
Remote access in AIX innd 1.5.1, using control messages...
CVE-1999-0082
CWD root command in ftpd allows root access...
bluestone.txt
Subject: Security Spoofed Id in Bluestone Sapphire/Web To: [email protected] INTRINsec Security Advisory Release Date : September 02, 1999 Software : Bluestone Sapphire/Web V5 Operating System: Solaris Impact : The attacker can access the session of other connected clients. Author :...
CVE-2000-0355
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files...
exlibris.alpeh.webserver.txt
Date: Fri, 21 May 1999 12:08:00 +0200 From: Jakub Urbanec To: [email protected] Subject: ExLibris Aleph Web server Security Alert We have found a security hole in web server bundled with Aleph librarian system ver. 3.25 and higher ExLibris. The web server in its default configuration allows...
tigris-rat-access.txt
Date: Sun, 3 Jan 1999 00:55:22 +1100 From: Robert Thomas To: [email protected] Subject: ACC's 'Tigris' Access Terminal server security vunerability.. ACC link - http://www.acc.com have been aware of this flaw for 3 months now, so I'm not springing this on them unaware. Just so you know 8- OS...
cfusion.txt
L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: April 20th, 1999 Application: Cold Fusion Application Server Severity: Web users can download, delete and even upload executable files to a Cold Fusion server. Access is not limited to files under...
alibaba.2.0.txt
Date: Thu, 6 May 1999 23:51:27 +0200 From: Arne Vidstrom To: [email protected] Subject: ".."-hole in Alibaba 2.0 Hi, I've found a security hole in the web server Alibaba 2.0 the latest version. I haven't tried it on any other version. Here's an example: If you install it so the web...
topdesk.passwd.txt
Date: Mon, 15 Feb 1999 14:05:52 GMT From: dapozza To: [email protected] Subject: lame TOPdesk program encryption Hi all, I was just playing with a program called TOPdesk, it's a helpdesk program and you have the usual login for normal users and superusers. I don't know if this is a Dutch only...
ms.personal.webserver.txt
Date: Sat, 27 Mar 1999 11:29:56 -0800 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-010 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...
ftpwatch.txt
Date: Sun, 17 Jan 1999 11:48:22 -0400 From: Jamie Fifield Reply-To: [email protected] To: [email protected] Subject: SECURITY ftpwatch package has major security problems -----BEGIN PGP SIGNED MESSAGE----- We have found that the ftpwatch package as distributed in Debian GNU/Linux 1.3 and lat...
Compaq Client Management Agents 3.704.0 Insight Management Agents 4.21 A4.22 A4.30 A Intelligent Cluster Administrator 1.0 Management Agents for Workstations 4.20 A Server Management Agents 4.23 Survey Utility 2.0 - Web File Access
Compaq Client Management Agents 3.704.0 Insight Management Agents 4.21 A4.22 A4.30 A Intelligent Cluster Administrator 1.0 Management Agents for Workstations 4.20 A Server Management Agents 4.23 Survey Utility 2.0 - Web File Access source: https://www.securityfocus.com/bid/282/info A vulnerabilit...
CVE-1999-1393
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally...
CVE-1999-0776
Alibaba HTTP server allows remote attackers to read files via a .. dot dot attack...
Microsoft IIS 4.0 / Microsoft Site Server 3.0 - Showcode ASP
source: https://www.securityfocus.com/bid/167/info A sample Active Server Page ASP script installed by default on Microsoft's Internet Information Server IIS 4.0 gives remote users access to view any file on the same volume as the web server that is readable by the web server. IIS 4.0 installs a...
Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal
source: https://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that will allow any file to be read through the log service port ov...
[SECURITY] New versions of proftpd fixes buffer overflow
We have received reports that the proftpd package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise circumvent normal login access and logging mechanisms. This has been fixed in...