9709 matches found
Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow
Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow // source: https://www.securityfocus.com/bid/5188/info The Microsoft Foundation Class Library is a library used to develop applications for Microsoft Windows. Some versions of the MFC include an ISAPI class, which can be used to...
Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow
// source: https://www.securityfocus.com/bid/5188/info The Microsoft Foundation Class Library is a library used to develop applications for Microsoft Windows. Some versions of the MFC include an ISAPI class, which can be used to construct applications which extend web server functionality...
CVE-2001-0631
CVE-2001-0631 affects Centrinity First Class Internet Services 5.50. The vulnerability arises from the presence of the string '' in the email From header, which bypasses default spam filters and allows remote attackers to send spoofed messages that appear to originate from local users. The provid...
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
CVE-1999-1163
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor SSP Teststation...
CVE-1999-1163: Undefined Security Weakness
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor SSP Teststation...
CVE-2001-0631: Undefined Security Weakness
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
CVE-2001-0643
Internet Explorer 5.5 does not display the Class ID CLSID when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type...
CVE-2000-1202
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class...
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
CVE-2001-0568
Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker Zope user with through-the-web scripting capabilities to alter ZClasses class attributes...
NT drivers are potentially vulnerable to format string bug
Many NT drivers are potentially vulnerable to "format string bug". The problem is concerned with DbgPrint function that is used for debug messages. Some drivers instead of directly call of this function use additional intermediate functions. Those functions add a prefix to an outputted string,...
CVE-2000-1099
Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...
CVE-2000-0530
The CVE-2000-0530 entry describes a vulnerability in KDE 1.1.2 where the KApplication-class creates configuration files without proper ownership checks or existence verification. The result is a local privilege-attack risk: a local user can exploit a symlink/ownership flaw to overwrite arbitrary ...
CVE-2000-0530
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...
Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket
Sun JDK 1.1.x Sun JRE 1.1.x - Listening Socket source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...
Очередная дырка в KDE
Класс KApplication некорректно работает с конфиуграционными файлами не проверяются символьные линки, что позволяет атаковать любое приложение, использующее данный класс например ktvision и ktuner...
Security bug in Apache project: Jakarta Tomcat
The Apache project: Jakarta Tomcat contains a serius security bug. Tomcat is used together with the Apache web server to serve Java Server Pages and Java servlets. Summary from the Tomcat development team advisory is posted below: Advisory: Delivered with Tomcat is an example jsp/source.jsp that...
TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service
TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service source: https://www.securityfocus.com/bid/1690/info Long commands ie., over 2048 bytes sent to TYPSoft FTP Server cab cause the server to hang, requiring a manual restart to restore the process. After the release of this advisory Noam...