3813 matches found
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
PT-1999-1174
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to Anonymous FTP being enabled. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-1999-1179 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inappropriate permissions for system-critical data in an anonymous FTP account. This includes the root directory being writeable by anyone, the ability to obtain ...
CVE-1999-1411
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...
[SECURITY] new version of fsp fixes security flaw
We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...
[SECURITY] new version of fsp fixes security flaw
We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...
CVE-1999-1298
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources...
CVE-1999-1119
FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands...
Denial of Service Vulnerabilities in Windows SMB implementation
Advisory ID Internal CORE-220618 Bugtraq ID: 5556 CVE Name: CAN-2002-0724 CERT: VU311619, VU342243, VU250635 Title: Denial of Service Vulnerabilities in Windows SMB implementation Class: Implementation flaws Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft...
Anonymous Open Redirect - Moderately Critical - Open Redirect
More info at https://www.drupal.org/sa-core-2018-006...
Anonymous Open Redirect - Moderately Critical - Open Redirect
More info at https://www.drupal.org/sa-core-2018-006...
Security Update for Windows Server 2003 (KB970483)
A security issue has been identified that could allow an anonymous remote attacker to bypass authentication requirements of running Internet Information Services IIS. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart...
Security Update for Windows Server 2003 for Itanium-based Systems (KB970483)
A security issue has been identified that could allow an anonymous remote attacker to bypass authentication requirements of running Internet Information Services IIS. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart...