Pieterpost - access to "vitual" account

Hello bugtraq readers and writers ! name: PieterPost 0.10.6 homepage: http://todsah.nihilist.nl/index.php?p=Development/Projects/Pieterpost about: "PieterPost is a webbased interface to a pop3 mailbox. It is designed to be both small and easy to use" what: entering url...

Hylafax 4.1.x - HFaxD Format String

// source: https://www.securityfocus.com/bid/9005/info Hylafax hfaxd daemon has been reported prone to an unspecified format string vulnerability that may be exploited under non-standard configurations to execute arbitrary instructions remotely as the root user. / Hylafax remote root PoC exploit ...

CVE-2003-0683

NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions...

Assorted Trend Vulns Rev 2.0

Trend Micro Assorted Vulnerabilities Rev 2.0 01/14/03 Information I have had these sitting around for about a year and just said "fawk it" and am giving 'em to the community to sort through before they start growing edible fungi. Not even sure if they work on newer versions of Trend software, too...

DSA-181 libapache-mod-ssl - cross site scripting

Bulletin has no description...

Xitami GSL problems

No description provided...

CVE-2002-0419

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...

HTTP proxy default configurations allow arbitrary TCP connections

Overview Multiple vendors' HTTP proxy services use insecure default configurations that could allow an attacker to make arbitrary TCP connections to internal hosts or to external third-party hosts. Description HTTP proxy services commonly support the HTTP CONNECT method, which is designed to crea...

Login configurations

This plugin provides the username and password credentials for common servers, such as HTTP, FTP, NNTP, POP2, POP3, IMAP, IPMI, and SMB NetBios. Some plugins will use those credentials when needed. If you do not provide the credentials, those plugins will not be able to run. Note that this plugin...

Security Advisory: A Vulnerability in IOS Firewall Feature Set

Cisco Security Advisory: A Vulnerability in IOS Firewall Feature Set Revision 1.0 For Public Release 2001 November 28 08:00 UTC -0800 Summary The IOS Firewall Feature set, also known as Cisco Secure Integrated Software, also known as Context Based Access Control, and introduced in IOS version...

Internet Explorer allows reading of local files by remote webpages

Summary ------- There is a vulnerability in MS Internet Explorer that allows any webpage or HTML email to read arbitrary local files. This bug may also lead to remote command execution. Vulnerable versions ------------------- All versions of IE seem to be affected. The following configurations ha...

[RHSA-2001:142-15] kernel 2.2 and 2.4: syncookie vulnerability

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: kernel 2.2 and 2.4: syncookie vulnerability Advisory ID: RHSA-2001:142-15 Issue date: 2001-10-26 Updated on: 2001-11-02 Product: Red Hat Linux Keywords: syncookie security kerne...

CVE-2001-0077

CVE-2001-0077 concerns the clustmon service in Sun Cluster 2.x, which does not require authentication. This allows remote attackers to access sensitive information such as system logs and cluster configurations. The available connected documents confirm the vulnerability details (unauthenticated ...

Important: Red Hat Security Advisory: Kernel

A security hole has been found that does not affect the default configuration of Red Hat Linux, but it can affect some custom configurations of Red Hat Linux 7.1. The bug is specific to the Linux 2.4 kernel series. Aside from the fix, countless bugfixes have been applied to this kernel as a resul...

CVE-2000-0313

Technical details about CVE-2000-0313 are not provided in the connected documents. The initial description mentions an OpenBSD 2.6 local interface-media change issue, but no concrete product/version specifics or remediation are included here. Monitor for updates.

CVE-2000-0313

Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations...

CVE-2000-0313

Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations...

WU-FTPD 2.6.0 - Remote Format Strings

/ 12:40 11/10/00: Tool for either attack or defense within an information warfare setting. Rather, it is a small program demonstrating proof of concept. Default values for solaris 2.8 and inetd. If you are not the intended recipient, or a person responsible for delivering it to the intended...

hybrid-ircd

format string problems in hybrid-ircd. some fixed need valid domain, and in-addr.arpa. bind8, configure check-names warn; make host nnnn.host.com in a 1.2.3.4 4.3.2.1.in-addr.arpa in ptr nnnn.host.com connect to comstud CS server because allows connect 2nd client to hybrid server, join channel...

MS IE5 + ftp proxy

Problem: IE5 doesn't use proxy for FTP connection if option "Enable folder view for FTP sites" is checked. This option is checked by default. Configuration: tested in 2 configurations: 1. Windows NT 4.0 wrkst + SP5 + IE5.0 2. Windows NT 4.0 wrkst + SP6a + IE5.01 both has a problems. There is no...