5498 matches found
CVE-2002-0712
CVE-2002-0712 (Entrust EASM 6.0) : The vulnerability exists in Entrust Authority Security Manager where the multiple-authorization requirement for sensitive master-user functions is not enforced for changing another master user’s password, enabling a single master user to impersonate another and ...
Microsoft Windows Server 2000 - RSVP Server Authority Hijacking
// Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking // // A problem has been identified in the RSVP Server for Microsoft Windows 2000 that // may allow an attacker to hijack management of the network. This could allow an // attacker control of network Quality of...
MS Windows 2000 RSVP Server Authority Hijacking PoC Exploit
No description provided by source. // Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking // // A problem has been identified in the RSVP Server for Microsoft Windows 2000 that // may allow an attacker to hijack management of the network. This could allow an // attacke...
MS Windows 2000 RSVP Server Authority Hijacking PoC Exploit
Exploit for unknown platform in category remote exploits =========================================================== MS Windows 2000 RSVP Server Authority Hijacking PoC Exploit =========================================================== // Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Serv...
Webdeskpro role modify vulnerability
Webdeskpro has 4 role authority levels- author, editor, administrator, master We found a vulnerability in Webdeskpro UI. After login, if we modify some role variables as follows , we can read upper role level?s files. Role Modification FRAME...
CVE-2003-0378
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...
Entrust Authority Security Manager (EASM) does not enforce multiple authorization requirement for master user password change
Overview Entrust Authority Security Manager contains a vulnerability that could allow a master user to change the password of another master user. A master user could exploit this vulnerability to perform operations that otherwise require authorization by multiple master users. Description Entrus...
CVE-2002-2125
Internet Explorer 6.0 does not warn users when an expired certificate authority CA certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle MITM attack...
CVE-2002-2414
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority CA certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service crash...
IE SSL Vulnerability
======================================================================== Internet Explorer SSL Vulnerability 08/05/02 Mike Benham [email protected] http://www.thoughtcrime.org ======================================================================== Abstract Internet Explorer's implementation...
RCS public file sharing vulnerability
Hi, This is a vulnerability Andreas and I found about eight weeks ago. This was then first reported to the vendor and CERT. CERT received it on 5/10/02 at 8:01pm. They haven't yet done anything with it as far as I can tell. - I haven't received anything from them except for the automated response...
Hosting Controller still have dangerous bugs!
-Vulnerable versions: all HC versions. 1.Database directory travelsal: By adding slash dot dot,the user can view the files,folders located on the sytem and can add DSN out of user root directory. http://www.target.com/admin/dsn/dsnmanager.asp?...
CVE-2001-0948
Cross-site scripting CSS vulnerability in ValiCert Enterprise Validation Authority EVA 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed...
PT-2001-2103 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server
Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue arises from the use of insufficiently random data. This affects two main areas: 1 the generation of session tokens for HSMs,...
PT-2001-2102 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server
Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue allows remote attackers to execute arbitrary code via long arguments to various parameters, including Mode, Certificate File,...
Internet Explorer incorrectly validates certificates when CRL checking is enabled
Overview Microsoft Internet Explorer IE fails to properly validate certificates when CRL checking is enabled. As a result, sensitive information may be exposed. Description Digital certificates are small documents used to authenticate and encrypt information transmitted over the Internet. One ver...
CVE-1999-0995
Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...
CVE-1999-0721
Denial of service in Windows NT Local Security Authority LSA through a malformed LSA request...
CVE-1999-0995
Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...