2107 matches found
CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...
[VulnWatch] Vignette Application Portal Unauthenticate Diagnostics
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Vignette Application Portal Unauthenticated Diagnostics Release Date: 09-28-2004 Application: Vignette Application Portal Platform: Multiple Severity: Unauthenticated diagnostic functionali...
Vignette Application Portal Diagnostic Utility Information Disclosure
The remote host is running Vignette Application Portal, a commercially available portal suite. There is an information disclosure vulnerability in the remote version of this software. An attacker can request the diagnostic utility which will disclose information about the remote site by requestin...
xploit_dbg.cpp.txt
/ Discovered and coded Jan 25, 2004 Copyright C2004 [email protected] / include include typedef int NTSTATUS; define NTAPI stdcall const IA32SYSENTERCS = 0x174; const IA32SYSENTERESP = 0x175; const IA32SYSENTEREIP = 0x176; const SelCodeKernel = 0x8; const CmosIndx = 0x0E; // CMOS Diagnostic...
Многочисленные ошибки в IMail
Можно получить несанкционирванный доступ к учетным записям других пользователей, различаются диагностические сообщения для неправильного иени пользователя и пароля, возможности DoS и т.д...
Получение пароля в Castelle Faxpress (information leakage)
При печати диагностического сообщения выдается пароль пользователя...
Сбор информации о пользователях Check Point VPN-1 (information leakage)
Различные диагностические сообщение на неверное имя пользователя и пароль...
Уявзвимость в IIS при обработке HTW (.htw URL script)
При обращении к .htw файлам URL может содержать скрипт. При выдаче дагностического сообщения URL не будет комментироваться, что позволяет выполнить скрипт в контексте сервера...
LBL Traceroute 1.4 a5 - Heap Corruption (3)
// source: https://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets. Certain versions of LBNL tracerou...
Compaq Java Applet for Presario SpawnApp - Code Execution
Compaq Java Applet for Presario SpawnApp - Code Execution source: https://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The...
Compaq Java Applet for Presario SpawnApp - Code Execution
source: https://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The problem is that the applet can run any program, and can b...
Update for customer experience and diagnostic telemetry
None None...
Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available
None None...
Security update for the Diagnostic Hub Standard Collector denial of service vulnerability in Visual Studio 2015 Update 3 (KB5063035)
Diagnostics Hub Standard Collector Denial of Service Vulnerability...
Security update for the Diagnostic Hub Standard Collector elevation of privilege vulnerability in Visual Studio 2015 Update 3 (KB4463110)
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations...
Security update for the Diagnostic Hub Standard Collector elevation of privilege vulnerability in Visual Studio 2015 Update 3 (KB4538032)
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context...
Microsoft Internet Security and Acceleration (ISA) Server 2004 Service Pack 3 (SP3)
ISA Server 2004 Service Pack 3 provides increased security, new troubleshooting options and tools available directly from the ISA Server Management console, new diagnostic logging functionality, and enhanced log viewer and log filtering options for ISA Server 2004 Standard Edition and Enterprise...
Update Rollup 5 for Windows Server Solutions Best Practices Analyzer 1.0 is available
None None...