security flaw

The ECNE chunk handling in Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via an unexpected chunk when the session is in CLOSED state...

Design/Logic Flaw

The ECNE chunk handling in Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service kernel panic via an unexpected chunk when the session is in CLOSED state...

Bugzilla bug tracking system information leak

It's possible to determine if closed product exist, password can be leaked as a part of URL...

CVE-2005-1564

postbug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product...

CVE-2005-1564

postbug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product...

DEBIAN-CVE-2004-1270

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers...

Sygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass

source: https://www.securityfocus.com/bid/10540/info A vulnerability is reported to affect the Sygate Personal Firewall fail-closed functionality. It is reported that the kernel-space NDIS driver does not verify the origin of messages that are received through the associated device. As a result o...

[VSA0308] Half-Life AMX-Mod remote (root) hole

void.at Security Advisory VSA0308 - mailto:crew at void dot at AMX1 is a plugin for the "Half-Life Server", hosting the most popular online game today, "Counter-Strike", among others. Overview ======== Due to a format string bug in AMX, it is possible for a remote attacker who knows the...

Security Update: [CSSA-2002-SCO.43] UnixWare 7.1.1 Open UNIX 8.0.0 : closed file descriptor race vulnerability

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: UnixWare 7.1.1 Open UNIX 8.0.0 : closed file descriptor race vulnerability Advisory number: CSSA-2002-SCO.43 Issue date: 2002 December 09 Cross referenc...

Сканирование портов через cachemgr.cgi в squid (unauthorized access)

Можно пробовать подключаться к портам внутри закрытой сети...

Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing

Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing source: https://www.securityfocus.com/bid/3964/info Alteon ACEdirector is a hardware solution distributed by Nortel Networks. ACEdirector runs the Nortel WebOS operating system. It is possible to retrieve the real IP addresses of...

Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing

source: https://www.securityfocus.com/bid/3964/info Alteon ACEdirector is a hardware solution distributed by Nortel Networks. ACEdirector runs the Nortel WebOS operating system. It is possible to retrieve the real IP addresses of webservers that are managed by an ACEdirector. When a client is...

CVE-2001-0619

The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear...

CVE-2001-0619

Technical details for CVE-2001-0619 are not publicly available in the provided documents. Monitor for updates on affected components, versions, impact, and remediation.

CVE-2001-0619

The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear...

eXtremail Remote Format String ('s)

Bugtraq readers, eXtremail is a free integrated pop3/smtpd mail daemon for Linux x86, although it is free it is closed sourced software. It has been found that the majority of the newer versions are vulnerable to a remotely exploitable format string condition. The following versions are confirmed...

Buffer overflows in Skyline/SpinBox client

There are some buffer overflows in SpinBox/1.1 from the spinserver.conf. SpinBox is an SSI/cgi-tool used by advertisement companies, made by Skyline. Since this is closed source software, I can't post the sources. The buffer overflows are mostly in the query string strcat and strcpy instead of...

Visual Studio 2017 Security Update (15.9.80)

This security update applies to all editions of Visual Studio 2017 between versions 15.0.0 and 15.9.79, and will update client machines to version 15.9.80. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order...

Visual Studio 2022 Security Update (17.14.36)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the Current channel to version 17.14.36. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the upda...

Visual Studio 2026 Security Update (18.5.3)

This security update applies to all editions of Visual Studio 2026, and will update client machines on the Stable channel to version 18.5.3. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...