4356 matches found
CVE-2000-0022: Undefined Security Weakness
Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...
CVE-2000-0121: Undefined Security Weakness
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...
FreeBSD-SA-00:06.htdig
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:06 Security Advisory FreeBSD, Inc. Topic: htdig port allows remote reading of files Category: ports Module: htdig Announced: 2000-03-01 Affects: Ports collection before...
sambar.bat.txt
PRODUCT ------- The Sambar Server is a multi-threaded HTTP, FTP and Proxy server for Windows NT and Windows 95. AFFECTED VERSIONS ----------------- All version of Sambar server running under Windows NT 4.0 and Windows 2000. Windows 98 version is vulnerable. VULNERABILITY DESCRIPTION...
Sambar Server Multiple Script Arbitrary Code Execution
At least one of these CGI scripts is installed : hello.bat echo.bat They allow any attacker to execute commands with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10246;...
CVE-2000-0119
The CVE-2000-0119 entry describes a vulnerability in McAfee VirusScan and Norton Anti-Virus where default configurations do not scan files in the Windows Recycle Bin’s RECYCLED folder. This allows an attacker to store malicious code undetected within that folder. The root cause is the failing to ...
CVE-1999-0509
CVE-1999-0509 describes remote arbitrary-command execution when shell interpreters (Perl, sh, csh, etc.) are installed in the web server’s /cgi-bin directory. The underlying issue is CGI scripts running with the server’s privileges, enabling attackers to execute commands. Affected scenario: a WWW...
CVE-1999-0509
Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands...
CVE-1999-0860
Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...
CVE-2000-0021: Undefined Security Weakness
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...
CVE-1999-0509: Improper Control of Generation of Code
Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands...
PT-2000-1102 · Microsoft · Shtml.Dll +1
Name of the Vulnerable Software and Affected Versions: Frontpage Server Extensions affected versions not specified Description: The issue allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the / vti bin/ virtual directory. Recommendation...
CVE-2000-0121
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...
bypass.viruscheck.txt
Greetings All, I originally released this vulnerability over the Christmas holidays on NTBugTraq. I spoke with a member of the Security Focus staff about getting it onto the web site and was told that I should post the problem here. During our conversation we decided that I hadn't been clear in m...
Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder
Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: https://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is...
Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder
Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: https://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is created in the \Recycler folder on that partition with the nam...
CVE-2000-0022
Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...
IBM Lotus Domino HTTP Server Filesystem Setup Disclosure
It is possible to get the absolute path leading to the remote /cgi-bin directory by requesting a bogus cgi. This issue can be used to obtain OS and installation details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
solaris.chkperm+arp.txt
Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...