3343 matches found
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...
wgate41a.txt
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...
Linux news 29.09.00
Linux 2.2.18pre11 Alax Cox выпустил новую pre-версию следующего стабильного ядра Linux: 2.2.18pre11. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-09-27-011-04-NW-KN MySQL 3.23.25 Вышла новая beta версия популярного SQL сервера MySQL - MySQL 3.23.25. Подробнее:...
Linux news 22.09.00
2.4.0-test9-pre5 kernel released Вышла новая тестовая версия 2.4.0 кернела test9-pre5. Она включает в себя множество исправлений. Так же продолжен процесс синхронизации драйверов между 2.2 и 2.4 ветками Подробнее: http://balrog.ruwr.ru/tmp/test9-pre5.txt Роботы под Linux Как оказалось, на...
New Tool: initd_.sh;
/ Attachment did not send... resending sorry for the bulk / Heyas ; I wrote this tool in the last couple of days to see if I could actually implement a program that would automatically attack local binaries and attempt to find exploits in respect to buffer overflows via command line switches...
VIGILANTE-2000007
Intel Express Switch 500 series DoS Advisory Code: VIGILANTE-2000007 Release Date: August 28, 2000 Systems Affected: Intel Express Switch 550F - Firmware version 2.63 - Firmware version 2.64 Based on the response from Intel quoted below, it is very likely that other switches from the same series...
Linux news 7.07.00
Linux Kernel pre-patch 2.4.0 test3-pre3 Вышел третий пререлиз третьего тестового ядра Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Kernel traffic 74 Вышел очередной номер отличного сборника писем с комментариями из списка рассылки ядра Linux. На этот раз там можно...
[SECURITY] New verion of dhcp released
Package: dhcp-client-beta dhcp-client Vulnerability type: remote root exploit Debian-specific: no The versions of the ISC DHCP client in debian 2.1 slink and debian 2.2 potato are vulnerable to a root exploit. The OpenBSD team reports that the client inappropriately executes commands embedded in...
Linux news 21.06.00
Ядро 2.4.0test1-ac22 Работа вошла в привычный режим... Alan выпускает патчи, мы их тестируем. http://www.kernel.org Обновления для 2.2.16 от RedHat После не так давно обнаруженных ошибок в ядре 2.2.16, RedHat выложило подправленную версию ядра. Подробнее:...
Linux news 19.06.00
Ядро 2.2.17pre4 Alan Cox выпустил следующий патч для нового стабильного ядра ветки 2.2. В нем - исправления различных ошибок в драйверах и т.д. Подробнее: http://www.kernel.org Linux Kernel 2.4.0test1-ac20 Alax Cox работает даже в выходные!!! ;- Вышло его очередное тестовое ядро из серии Linux...
Linux news 14.05.00
Linux 2.3.99-pre8 Вышло новое ядро из нестабильной серии - 2.3.99-pre8 Подробнее: http://www.kernel.org Wonderful World of Linux 2.4 Final Candidate 4 5/12/00 Появилась очередная версия статьи - Wonderful World of Linux 2.4, в которой рассказывается о новых возможностях следующего ядра Linux -...
CVE-2000-0281
CVE-2000-0281 describes a buffer overflow in the Napster client beta 5 that allows a remote attacker to cause a denial of service by sending a long message. The vulnerability is triggered through the message-processing path, leading to potential crash or instability of the Napster client. The exi...
Linux news 6.04.00
Обновлен список работ для 2.4 Alan обновил список работ, которые необходимо выполнить для ядра 2.4. Подробнее: http://www.linuxtoday.org/stories/19479.html Kernel Traffic 61 Вышел очередной Kernel Traffic, за номером 61. Подробнее: http://www.linuxtoday.com McAfee VirusScan for Linux...
Security bug in Apache project: Jakarta Tomcat
The Apache project: Jakarta Tomcat contains a serius security bug. Tomcat is used together with the Apache web server to serve Java Server Pages and Java servlets. Summary from the Tomcat development team advisory is posted below: Advisory: Delivered with Tomcat is an example jsp/source.jsp that...
CVE-2000-0096
Qpopper 3.0 beta is vulnerable to a buffer overflow via a long LIST command, enabling local privilege gain. This CVE (CVE-2000-0096) affects Qpopper and is detailed in multiple sources, including CVE records and the Nessus 10197 plugin for Qpopper
CVE-1999-1289
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...
CVE-1999-1224
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT abort signal, which allows local users to crash the server imapd via certain sequences of commands, which causes a core dump that may contain sensitive password information...
Sun Java Web Server 1.1 Beta - Viewable .jhtml Source
Sun Java Web Server 1.1 Beta - Viewable .jhtml Source source: https://www.securityfocus.com/bid/1891/info A vulnerability exists in Sun Microsystems' JavaWebServer for Win32, version 1.1Beta. JavaWebServer is a Java-oriented web application development platform. If a URL is submitted requesting a...
PT-1990-1003 · At&T +1 · Korn Shell +1
Name of the Vulnerable Software and Affected Versions: HP Apollo Domain/OS versions sr10.2 through sr10.3 beta Description: The issue is related to the /etc/suid exec program and the Korn Shell ksh in HP Apollo Domain/OS. Recommendations: For HP Apollo Domain/OS versions sr10.2 through sr10.3 bet...
