PT-2001-2600 · Microsoft · Windows 2000 Sp1

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP1 Description: The issue arises when Macintosh clients use NT file system volumes on Windows 2000 SP1. In this scenario, the creation of subdirectories automatically modifies the inherited NTFS permissions, potentially resultin...

PT-2001-1066 · Openssh +1 · Openssh-Askpass-Gnome +5

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.9.9 openssh-server version 2.9p2 openssh-clients version 2.9p2 openssh version 2.9p2 openssh-askpass-gnome version 2.9p2 openssh-askpass version 2.9p2 Description: The issue affects the confidentiality, integrity,...

Buffer Overflows in various email clients

Overview Buffer Overflows in several MIME headers affect a large number of electronic mail clients. Description A variety of electronic mail clients circa 1998 are vulnerable to buffer overflow attacks in the code that processes MIME headers. See the vendor statements referenced below for details...

CVE-2000-0892

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL...

ID Software Quake 1.9 - Denial of Service

ID Software Quake 1.9 - Denial of Service // source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent...

ID Software Quake 1.9 - Denial of Service

// source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent legitimate players from connecting to the Quake...

ISSalert: ISS Advisory: Oracle Redirect Denial of Service

Internet Security Systems Security Advisory June 19, 2001 Oracle Redirect Denial of Service Synopsis: Internet Security Systems ISS X-Force has identified a vulnerability with redirected Oracle connections. This vulnerability allows an unauthenticated user to consume all the memory on an Oracle...

CVE-2001-1359

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...

Advisory for Electrocomm 2.0

Advisory for Electrocomm Electrocomm is made by Electrosoft Site: http://www.esei.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0118 /-|=explanation=|- ElectroComm allows you to connect to a comm port on a computer over a network using any Telnet client. The progra...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...

nap allows arbitrary file access

According to the author: Fixed security loophole which allowed remote clients to access arbitrary files on our system...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...

ICQ to ICQ Protocol vurnerable, send messages and receive from any ICQ UIN

TITLE: Send messages and receive from any ICQ UIN PLATFORM: All CREDIT: MelcoSoft CONTACT: [email protected] REMOTE: Yes LOCAL: Yes VULNERABLE: Almost all ICQ Clients Client ICQ to ICQ protocol vurnerable for details view source files... Do you want send messages and receive from any ICQ UIN ?!...

CVE-2001-0103

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords...

CVE-2001-0103

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords...

CVE-2001-0103

The CVE-2001-0103 entry concerns CoffeeCup Direct and Free FTP clients that store passwords in FTPServers.ini using weak encryption. The root cause is weak password storage, enabling an attacker with local access to decrypt stored credentials (as described in the NVD entry). The connected documen...

CVE-2000-0929

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability...

Older SSH clients do not allow users to disable X11 forwarding

Overview This vulnerability may allow an attacker to make unauthorized connections to affected client machines. Description Older versions of the SSH client do not allow the user to disable X11 forwarding. As a result, if the client connects to a malicious server, the server can open an X11...

Microsoft Windows Media Player 7.0 - '.wms' Arbitrary Script (MS00-090)

----Title: GFISEC23112000 Microsoft Media Player 7 allows executation of Arbitrary Code ----Published: 23.NOV.2000 ----Vendor Status: Microsoft has been informed and we have worked with them to release a patch. ----Systems Affected: Windows ME WMP7 is installed by default and 95,98 NT and 2000,...

beos vulnerabilities

This advisory was actually written by me back in febuary this year, only to be misplaced and forgotten about until now. Some of the applications listed, most noteably baxter and the other irc clients, were patched earlier this year as a result of me informing the relevant developers. These...