HP-UX 10.20/11.0 - '.SNMPD' File Permission

source: https://www.securityfocus.com/bid/1327/info A vulnerability exists in the snmpd included with HPUX 11, from Hewlett Packard. The configuration file for the snmpd is world writable. This could allow any user on the system to view and/or alter the settings of the snmp daemon. This in turn...

CVE-1999-0836

Technical details about CVE-1999-0836 are not publicly available in the provided documents. Monitor for updates from official advisories; the material here only notes a symlink attack enabling local file modification on UnixWare uidadmin.

Microsoft FrontPage dvwssr.dll Multiple Vulnerabilities

The version of Microsoft FrontPage running on the remote host has the following vulnerabilities in '/vtibin/vtiaut/dvwssr.dll' : - A security bypass vulnerability that allows anyone with web authoring permissions to alter other users' files. - A remote buffer overflow vulnerability that could all...

Черный ход в Dansie Shopping Cart

Разработчики оставили для себя возможность удаленного управления системой. Кроме того, любой ползователь может изменить цену покупки...

Stalker CommuniGate Pro 3.2.4 - Arbitrary File Read

source: https://www.securityfocus.com/bid/1493/info A vulnerability exists in the CommuniGate Pro product, from Stalker. It is possible to exploit this vulnerability to read arbitrary files on the filesystem. As CommuniGate Pro runs as root, any file can be accessed. Using this flaw, it is possib...

QuickCommerce 2.5/3.0 / Cart32 2.5 a/3.0 / Shop Express 1.0 / StoreCreator 3.0 Web Shopping Cart - Hidden Form Field

E-Commerce Exchange QuickCommerce 2.5/3.0,McMurtrey/Whitaker & Associates Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability source: https://www.securityfocus.com/bid/1237/info Various shopping cart applications use hidden form fields within the...

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass

source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutable by the browser. In version 3, this function can be bypassed by...

CVE-1999-0901

ypserv allows a local user to modify the GECOS and login shells of other users...

sendmail.8.9.1-2.txt

Date: Thu, 24 Sep 1998 10:14:06 -0400 From: Simon Smith This is not the same attack as the last one regarding the "". This one does not make your system hang but rather alters permissions is seems. If this was already posted please disregard it...