netscape.4.51.javascript.txt

Date: Tue, 16 Mar 1999 11:09:41 PST From: Georgi Guninski To: [email protected] Subject: Re: Netscape upgrade FYI... Netscape has released version 4.51 of Communicator. It seems to fix the window spoofing bug http://www.geek-girl.com/bugtraq/19991/0747.html , along with the javascript bugs tha...

PT-1999-1365 · Netscape · Netscape Communicator

Name of the Vulnerable Software and Affected Versions: Netscape Communicator version 4.x Description: The issue concerns Netscape Communicator 4.x with Javascript enabled, where it does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating...

CVE-1999-0728

A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them...

in.fingerd Pipe Input Arbitrary Command Execution

It is possible to force the remote finger daemon to execute arbitrary commands by issuing requests like : finger |commandtoexecute@target An attacker may use this bug to gain a shell on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10126; scriptversion...

Identd Service Detection

The remote host is running an ident also known as 'auth' daemon. The 'ident' service provides sensitive information to potential attackers. It is designed to say which accounts are running which services. This helps attackers to focus on valuable services those owned by root or other privileged...

Multiple Unix Netstat Service Remote Information Disclosure

The remote host is running a 'netstat' service on this port. The 'netstat' service provides useful information to an attacker, since it gives away the state of the active connections. It is recommended that you disable this service if you do not use it. C Tenable Network Security, Inc. include...

FakeBO NetBus Handling Code Remote Overflow

The remote host appears to be running FakeBO, a service that mimics backdoors such as Back Orifice and NetBus, monitoring any login attempts. The version of FakeBO running on the remote host has a remote stack- based buffer overflow vulnerability. A remote attacker could exploit this to crash the...

Systat Service Remote Information Disclosure

The 'systat' service provides useful information to an attacker, such as which processes are running, who is running them, and so on. It is highly recommended that you disable this service. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10275; scriptversion...

Multiple FTP Server Command Handling Overflow

The remote FTP server closes the connection when a command or argument is too long. This is probably due to a buffer overflow and may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; ifdescription...

Echo Service Detection

The remote host is running the 'echo' service. This service echoes any data which is sent to it. This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host. C Tenable Network Security, Inc...

CVE-1999-0564

An attacker can force a printer to print arbitrary documents e.g. if the printer doesn't require a password or to become disabled...

PT-1999-1012 · Microsoft · Windows Nt Ftp Server

Name of the Vulnerable Software and Affected Versions: Windows NT FTP server affected versions not specified Description: The issue allows an attacker to log into the FTP server using any username and password when the guest account is enabled without a password. Recommendations: For Windows NT F...

PT-1999-1083 · Quakenbush · Quakenbush Nt Password Appraiser

Name of the Vulnerable Software and Affected Versions: Quakenbush NT Password Appraiser demo version Description: The issue concerns the transmission of passwords in plaintext over the network. Recommendations: For the demo version of the Quakenbush NT Password Appraiser, consider disabling the...

CVE-1999-1061

HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...

PT-1997-1015 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 3.x through 4.x Netscape versions 2.x through 4.x Description: The issue allows remote attackers to monitor a user's web activities. This is related to JavaScript in the affected browsers. Recommendations: For...

PT-1996-1028 · Perl · Suidperl +1

Name of the Vulnerable Software and Affected Versions: sperl affected versions not specified suidperl affected versions not specified Description: The issue concerns the suidperl and sperl programs, which fail to relinquish root privileges when switching UIDs back to the original users. This allo...

Kerio Personal Firewall Replay Attack and Buffer Overflow

Advisory ID Internal CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Names: CAN-2003-0219, CAN-2003-0220 Title: Kerio Personal Firewall Replay Attack and Buffer Overflow Class: Design Error; Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted...

PT-2010-5625 · Openldap +1 · Libldap +3

Name of the Vulnerable Software and Affected Versions: openldap versions 2.2.13 through 2.4.22 openldap versions prior to 2.4.35 openldap-clients-2.2.13 openldap-servers-2.2.13 openldap-servers-sql-2.2.13 openldap-devel-2.2.13 compat-openldap-2.1.30 libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev...

PT-2011-5224 · Popt +3 · Popt +3

Name of the Vulnerable Software and Affected Versions: RPM versions 4.4.x through 4.9.x rpm package affected versions not specified rpm-devel affected versions not specified rpm-devel-32bit affected versions not specified rpm-devel-64bit affected versions not specified rpm-32bit affected versions...

PT-2004-3700 · Lynx +2 · Lynx +2

Name of the Vulnerable Software and Affected Versions: Lynx versions 2.8.6 and earlier Description: The issue is related to multiple vulnerabilities in the Lynx package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can ...