6663 matches found
SECURITY.NNOV: Bypassing content filtering software
There are common methods allowing to bypass almost any content filtering software antiviral products, CVP firewalls, mail attachment filtering, etc. I believe multiple products are vulnerable. Contents: I. Bypassing attachment detection or invalid detection of attachment type. 1. Encoded filename...
[SA-2002:01] Slashcode login vulnerability
SA-2002:01 Slashcode login vulnerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a cross-site scripting vulnerability in all versions prior to 2.2.5, released February 7, 2002. Users who have Javascript enabled, and who can be persuaded to click...
[RHSA-2001:142-15] kernel 2.2 and 2.4: syncookie vulnerability
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: kernel 2.2 and 2.4: syncookie vulnerability Advisory ID: RHSA-2001:142-15 Issue date: 2001-10-26 Updated on: 2001-11-02 Product: Red Hat Linux Keywords: syncookie security kerne...
CVE-2001-1343
wsmail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter...
CVE-2001-0290
Mailman 2.0.1 and earlier contain a vulnerability that allows list administrators to obtain user passwords. The available sources confirm the affected product/version and the impact on confidentiality, but do not provide the underlying root cause specifics or a remediation fix/version. No exploit...
How to remove .printer mapping (WAS RE: Permanently remove IIS printer mapping)
This is from another list I receive. It explains this scenario rather well. Keith --------------------------------------------------- All IIS Administrators Please Read this Immediately --------------------------------------------------- I wanted to get this out right away. More info to follow. O...
CVE-2000-0861
CVE-2000-0861 affects Mailman 1.1. The vulnerability allows a list administrator to execute arbitrary commands by injecting shell metacharacters into the %(listname) macro expansion. The root cause is improper handling of the macro expansion, enabling command execution with LOCAL attack vector an...
CVE-2000-1229
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." dot dot sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3...
Mailman 1.1 + external archiver vulnerability
SUMMARY Mailman from www.list.org is a mailing list manager with strong Web functionality. If a site is running Mailman 1.1 with an external archiving mechanism that uses the internal variable listnames, list administrators can run any command with the Webserver's uid/gid. A patch is available at...
aix allows clearing the interface stats
hallo, aix versions 4.x.x will let a non-priveledged user clear the network interface statistics, thus annoying system administrators and interfering with the system scripts that depend on those numbers :- $ netstat -in -- shows stats $ netstat -Zi -- clears them without checking the uid ibm was...
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 Beta - Mail Logging Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/1158/info Sniffit is a freely available, open source network monitoring tool. It is designed for use on the Unix and Linux Operating Systems. Sniffit contains a remotely exploitable buffer overflow vulnerability. If Sniffit is configured to log emails,...
CVE-1999-0902
CVE-1999-0902 affects ypserv (noted in multiple feeds, including CBLMARINER and PT-1999-1448) with the vulnerability enabling local administrators to modify password tables. Affected package/version cited: ypserv 4.1-4. The core issue is an improper handling that allows a local privileged user to...
CVE-1999-0902
ypserv allows local administrators to modify password tables...
Microsoft Systems Management Server 2.0 - Default Permissions
Microsoft Systems Management Server 2.0 - Default Permissions source: https://www.securityfocus.com/bid/945/info The default permissions applied to the directory containing the SMS Remote Control executable allow any user to replace the executable with any other executable. The new executable wil...
CVE-1999-0902
ypserv allows local administrators to modify password tables...
AZL-37066 CVE-1999-0902 affecting package ypserv 4.2-12
ypserv allows local administrators to modify password tables...
AZL-7456 CVE-1999-0902 affecting package ypserv 4.1-4
ypserv allows local administrators to modify password tables...
PT-1999-1221 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns inappropriate user membership in various groups, including Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators,...