tcpdump 3.4/3.5 - AFS ACL Packet Buffer Overflow

/ source: https://www.securityfocus.com/bid/1870/info tcpdump is a popular network monitoring tool used for watching network traffic written by the Lawrence Berkeley Laboratory. It must at least begin execution as root since it opens and reads from the link layer interface through pcap. It is...

CVE-2000-0700

Cisco Gigabit Switch Routers GSR with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.215GS1A up to 11.219GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets...

Серьезная локальная DoS-атака против *BSD

Недокументированный системный вызов, используемый в ipcs, неиспользующий проверку ACL позволяет любому пользователю заблокировать выход приложений...

Cartfix Secret Backdoor Patch tool for cart32

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Tool Release Name: Cartfix Secret Backdoor Patch tool Release Date: April 27, 2000 Application: Cart32 Shopping Cart Program Platform: Win32 Severity: An attacker can execute commands on the web server and modify admin passwor...

CVE-1999-0993

The CVE-1999-0993 entry concerns Microsoft Exchange 5.5 where changes to ACLs do not take effect until the directory store cache is refreshed. Connected PT-1999-1512 confirms affected software: Microsoft Exchange 5.5, with the behavior that ACL modifications only apply after refreshing the direct...

Gauntlet_Firewall_Lockup.txt

Subject: Remotely Lock Up Gauntlet 5.0 To: [email protected] / Discovered and written by: - Reply to Network Associates: "Who's watching your network?" MSG.net "Who's watching the watchers?" This can be found online at http://www.msg.net/firewalls/tis/bland.c Description: If you know an I...

IBM GINA for NT 1.0 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/608/info IBM has written a replacement GINA for Windows NT to allow NT hosts to authenticate against OS/2 domains. On machines running the modified GINA, the creation of a specific Registry key under HKLM\System\CurrentControlSet\Services\IBMNeTNT may all...

router-tcpaccess-DoS.txt

Date: Thu, 4 Feb 1999 11:05:31 -0600 From: HD Moore To: [email protected] Subject: Widespread Router Access Port DoS +-------- Router Access Port DoS The tcp access / configuration ports on most routers can be disabled remotely. These sit on port numbers like 23,2001,4001,6001, and 9001. The...