3428 matches found
CVE-2001-1114
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...
CVE-2001-0844
Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...
Выполнение кода в NetCode NC Book (code execution)
Классическая ошибка perl нефильтруемый '|'...
CVE-2001-1114
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter...
NetCode NC Book book.cgi current Parameter Arbitrary Command Execution
The CGI 'book.cgi' is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10721; scriptversion"1.27";...
Microsoft Outlook 9798200045 - Address Book Spoofing
Microsoft Outlook 9798200045 - Address Book Spoofing source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that...
Microsoft Outlook 97/98/2000/4/5 - Address Book Spoofing
source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by the user of the mail client. An...
Проблема с адресной книгой в Outlook Express (address book vulnerability)
Отправив письмо со специальным образом составленного адреса атакующий может получить часть переписки между двумя пользователями...
SECURITY.NNOV: Outlook Express address book vulnerability
Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Author : 3APA3A [email protected] Affected : Outlook Exress 5.5SP1 and prior Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes...
Microsoft Outlook Express address book vulnerability
Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Affected : Outlook Exress 5.5SP1 and prior Risk : Low/Average Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes Vendor URL :...
CVE-2000-1089
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability...
CVE-2000-1089
CVE-2000-1089 is a buffer overflow in Microsoft’s IIS Phone Book Service (pbserver.dll) that, per the description, allows local users to execute arbitrary commands (Phone Book Service Buffer Overflow). Public material references MS00-094 as the corrective update and notes that the vulnerable comp...
CVE-2000-1089
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability...
Microsoft IIS Phone Book Service /pbserver/pbserver.dll Remote Overflow
The CGI /pbserver/pbserver.dll is subject to a buffer overflow attack that may allow an attacker to execute arbitrary commands on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10564; scriptversion"1.43...
@stake Advisory: IIS 4.0/5.0 Phone Book server buffer overrun (A120400-1)
@stake, Inc. www.atstake.com Security Advisory Advisory Name: IIS 4.0/5.0 Phone Book server buffer overrun Release Date: 12/04/2000 Application: Microsoft's Phone Book Server on IIS 4.0, 5.0 Platform: Windows NT 4.0, Windows 2000 Severity: A buffer overflow conditions exists in pbserver.dll that...
Security Bulletin (MS00-094)
-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...
Microsoft Windows NT 4.0 - Phonebook Server Buffer Overflow
source: https://www.securityfocus.com/bid/2048/info The Phone Book Service is an optional component that ships with the NT 4 Option Pack and Windows 2000. It is not installed by default. A buffer overflow vulnerability was discovered in the URL processing routines of the Phone Book Service reques...
Microsoft Windows NT 4.0 - Phonebook Server Buffer Overflow
Microsoft Windows NT 4.0 - Phonebook Server Buffer Overflow source: https://www.securityfocus.com/bid/2048/info The Phone Book Service is an optional component that ships with the NT 4 Option Pack and Windows 2000. It is not installed by default. A buffer overflow vulnerability was discovered in...
CVE-1999-0356
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...
CVE-1999-0356
Summary of CVE-1999-0356 (ControlIT) : Affects ControlIT versions prior to 4.5. The issue is the use of weak encryption to store usernames and passwords in an address book, exposing confidentiality and integrity. Root cause: insecure storage of credentials due to weak encryption. No explicit expl...