Cisco IPsec VPNSM vulnerable to DoS via malformed IKE packet

Overview A vulnerability in a Cisco VPN module can allow a remote attacker to cause a denial-of-service to the device in which the module is installed. Description The Cisco IP Security IPsec VPN Services Module VPNSM is a high-speed module for the Cisco Catalyst 6500 Series Switch and the Cisco...

CVE-2004-0189

The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass urlregex ACLs via a URL with a NULL "%00" character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists...

CVE-2002-0664

The CVE-2002-0664 entry describes a vulnerability in IBM Lotus Domino ZMerge administration databases where default ACLs allow arbitrary/anonymous users to obtain Manager-level access. This misconfiguration can let an unauthenticated attacker read or modify import/export scripts and disclose serv...

CVE-2000-0700

Cisco Gigabit Switch Routers (GSR) running IOS with Gigabit/Fast Ethernet cards are affected by a line-card failure defect (CVE-2000-0700, CSCdp35794) that can cause packets to bypass ACLs or be forwarded incorrectly, potentially disrupting enforcement and traffic flow. Affected versions include ...

Hancom Office 2007 - Reboot.ini Clear-Text Passwords

Hancom Office 2007 - Reboot.ini Clear-Text Passwords source: https://www.securityfocus.com/bid/228/info During installation of BackOffice 4.0, a file called reboot.ini is created and stored in the \Program Files\Microsoft BackOffice directory. This file contains clear-text usernames and passwords...