4109 matches found
mod_ssl Buffer Overflow Condition (Update Available)
modssl Buffer Overflow Condition Update Available -------------------------------------------------------- SYNOPSIS modssl www.modssl.org is a commonly used Apache module that provides strong cryptography for the Apache web server. The module utilizes OpenSSL formerly SSLeay for the SSL...
CVE-2001-0936
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request...
Alert: Vulnerability in frox transparent ftp proxy.
There is a security hole in all the 0.6.x versions of the frox transparent ftp proxy up to and including version 0.6.6. Version 0.6.7 fixes this vulnerability, and upgrading to this is advised. Development snapshots are also affected up to and including frox-20011031.tar.gz. The vulnerability is...
CVE-2001-0175
CVE-2001-0175 affects the Netscape Fasttrack Server 4.1 caching module. The vulnerability allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs. No exploits or remediation details are provided in the connected documents.
CVE-2001-0175: Undefined Security Weakness
The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service resource exhaustion by requesting a large number of non-existent URLs...
Проблемы с RSA BSAFE SSL (unauthorized access)
Ошибка в кэшировании сертификатов позволяет подключиться с недействительным сертификатом...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
RedHat 6.1/6.2/7.0/7.1 - Man Cache File Creation
source: https://www.securityfocus.com/bid/2815/info A vulnerability exists in the 'man' system manual pager program. It is possible for local users to cause man to cache files in the system cache directory from outside of the configured manual page hierarchy search path. Combined with the...
Уязвимость ipfilter (fragment caching filter bypass)
При проверке фрагментированного пакета не проверяются порты и флаги пакета, только адреса и ip id, если ip id имеется в кэше...
Serious bug in IPFilter
A VERY serious bug has been brought to my attention in IPFilter. In 10 words or less, fragment caching with can let through "any" packet. Ok, so that's 8. Cause ===== When matching a fragment, only srcip, dstip and IP ID are checked and the fragment cache is checked before any rules are checked. ...
defcom.netscape-fasttrack.txt
====================================================================== Defcom Labs Advisory def-2001-05 Netscape Fasttrack Server Caching DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...
def-2001-05: Netscape Fasttrack Server Caching DoS
====================================================================== Defcom Labs Advisory def-2001-05 Netscape Fasttrack Server Caching DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...
Дырка в ProFTPD (mod_sqlpw Password Caching)
Авторизованный пользоватлеь может переключиться в другого не зхная пароля...
mod_sqlpw Password Caching Bug
The modsqlpw module for ProFTPD caches the user id and password information returned from the mysql database when attempting to verify a password. When the "user" command is used to switch to another account, the cached password is not cleard, and the password entered is checked against the cache...
aim.caching.txt
% Advisory % Advisory % Advisory % Advisory % Advisory % Advisory % Author: f3d Program: AOL Instant Messanger Servers/Clients Fault: Caching vulnerability Os: Win/BSD/Aim compatible % Advisory % Advisory % Advisory % Advisory % Advisory % Advisory % Problem. There is a vulnerability in AOL Insta...
CVE-1999-0387
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...
CVE-1999-0387
CVE-1999-0387 affects Windows 95/98 where a legacy credential caching mechanism can be exploited to read plaintext network passwords. The Red Hat and CVE records reflect the same description: a local/system-level weakness in the credential cache that may expose confidential credentials. Documents...
CVE-1999-0387: Undefined Security Weakness
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...
CVE-1999-0910: Undefined Security Weakness
Microsoft Site Server and Commercial Internet System MCIS do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user...