newsbug.txt

------=NextPart000015301BF7FF9.87FC33E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I created my NewsBug approximately 2-3 months ago but never did = anything further with it as I have a lot of other projects I am working = on. I reported this to MS ...

snmp.writable.txt

Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...

CVE-1999-0795

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...

Roxen Web Server Counter Module Crafted Request Saturation DoS

Roxen Challenger WebServer is running with the counter module installed. Requesting large counter GIFs can lead to CPU exhaustion. If the server does not support threads, this will prevent the server from serving other clients. %NASLMINLEVEL 70300 Copyright 2000 by Hendrik Scholz Changes by...

PT-1999-1837 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.0 through 5.01 Description: The issue allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. Recommendations: For Internet Explorer versions 5.0...

Symantec pcAnywhere Status Service Detection (UDP)

The remote host is running Symantec pcAnywhere Status server, a service used to discover pcAnywhere servers on a network. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10006; scriptversion "1.32"; scriptcvsdate"Date: 2019/09/25 9:17:09"; scriptnameenglish:"Symantec...

ie50.frame-spoofing.txt

ult IE 5.0 security settings allow frame spoofing Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of th...

oracle_intelligent_agent.txt

START OF BUGTRAQ POST Oracle installations with the 'Oracle Intelligent Agent' installed have a path related vulnerability. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid root program calls a tcl script nmiconf.tcl located by default in...

SMTP Server Detection

The remote host is running a mail SMTP server on this port. Since SMTP servers are the targets of spammers, it is recommended you disable it if you do not use it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10263; scriptversion "1.57";...

NNTP Server Detection

The remote host is running a news server NNTP. Make sure that hosting such a server is authorized by your company policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10159; scriptversion "1.24"; scriptcvsdate"Date: 2019/11/22"; name"english" = "NNTP Server...

Telnet Server Detection

The remote host is running a Telnet server, a remote terminal server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10281; scriptversion"1.52"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/06/12"; scriptnameenglish:"Telnet Server Detection";...

POP Server Detection

The remote host is running a server that understands the Post Office Protocol POP, used by email clients to retrieve messages from a server, possibly across a network link. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10185; scriptversion "1.25"; scriptcvsdate"Date:...

suse6.2pbpg.txt

Brock Tellier [email protected] Sent: Thursday, September 16, 1999 5:06 PM Subject: Two SuSE 6.2 local root exploits Greetings, /usr/bin/pb and /usr/bin/pg, suid root by default on SuSE 6.2, allow any user to read any file on the system as shown: susebox:/root ls -la /usr/bin/pb uname -rwsr-xr-...

CDE RPC tooltalk Service Multiple Overflows

The tooltalk RPC service is running. A possible implementation fault in the ToolTalk object database server may allow an attacker to execute arbitrary commands as root. This warning may be a false positive since the presence of this vulnerability is only accurately identified with local access. C...

RPC etherstatd Service Detection

The etherstatd RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10215; scriptversion"1.22";...

3270 Mapper Service Detection

The 3270 mapper RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10208; scriptversion"1.22";...

RPC rstatd Service Detection

The remote host is running the rstatd RPC service. This service provides information such as : - the CPU usage - the system uptime - the network usage C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10227; scriptversion"1.34"; scriptcvsdate"Date: 2019/10/04 16:48:26";...

RPC database Service Detection

The database RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10214; scriptversion"1.22";...

RPC alis Service Detection

The alis RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10210; scriptversion"1.22";...

rquotad Service Detection

The rquotad RPC service is running. If you do not use this service, then disable it as it may become a security threat in the future, if a vulnerability were to be discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10226; scriptversion"1.27";...