2716 matches found
CVE-2001-0408
CVE-2001-0408 affects Vim (gvim); a crafted file containing VIM control codes can cause arbitrary commands to execute when opening the file. The root cause is Vim interpreting embedded control codes, enabled by the status line option in .vimrc, allowing code execution as the user. Mandrake adviso...
CVE-2001-0408
vim aka gvim processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes...
Apache UserDir Directive Username Enumeration
When configured with the 'UserDir' option, requests to URLs containing a tilde followed by a username will redirect the user to a given subdirectory in the user home. For instance, by default, requesting /root/ displays the HTML contents from /root/publichtml/. If the username requested does not...
CVE-2001-1013
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server...
implementation problem in Microsoft LDAP?
Hello, I have been looking at the microsoft LDAP service error codes responses and when I'm not authenticated anonymous I can know if an object exists or not. I would like to know if this is an implementation problem. Problem 1: Here we have a log of the saucer program an ldap client as you can...
[RHSA-2001:008-02] Updated vim packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated vim packages available Advisory ID: RHSA-2001:008-02 Issue date: 2001-01-29 Updated on: 2001-03-21 Product: Red Hat Linux Keywords: vim vim-enhanced stl status line Cros...
Samba Web Administration Tool (SWAT) Error Message Username Enumeration
The remote SWAT server replies with different error codes when it is issued a bad user name or a bad password. An attacker may use this flaw to obtain the list of user names of the remote host by a brute-force attack. As SWAT does not log login attempts, an attacker may use this flaw even more...
Wingate 4.1 Beta A vulnerability
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...
CVE-2000-0081
The CVE-2000-0081 entry concerns Hotmail and the improper filtering of JavaScript code in a user’s mailbox. The vulnerability lets a remote attacker execute JavaScript by bypassing filters with hexadecimal encoding of the javascript: protocol (for example jAvascript). Affected product is Hotmail;...
CVE-1999-0804
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths...
ultraseek.remote.txt
USSR & eEye DS Present: Infoseek Ultraseek 3.1 Remote Buffer Overflow USSR Advisory Code: 20 eEye DS Advisory Code: AD19991215 Release Date: December 15, 1999 Systems Affected: Infoseek Ultraseek 2.1 to 3.1 and possibly others. The Opener: T1 Internet Connection: $1,000/month Dell PowerEdge 4350...
CVE-1999-0804
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths...
GNU GNU bash 1.14 - Path Embedded Code Execution
GNU GNU bash 1.14 - Path Embedded Code Execution source: https://www.securityfocus.com/bid/119/info A vulnerability in bash may allow inadvertently running commands embedded in the path to the currently working directory. If an unsuspecting user enters a directory created by some malicious user...
CVE-1999-0419
When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service...
[SECURITY] New versions of ircII fixes security problem
David Holland has reported that a remote user may send arbitrary characters - ansi codes - to a users terminal. This is considered harmful. The following versions fix this problem. dpkg -i file.deb will install the referred file. Debian GNU/Linux 1.3.1 alias bo -------------------------------...
