9540 matches found
CVE-1999-0728
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them...
FakeBO NetBus Handling Code Remote Overflow
The remote host appears to be running FakeBO, a service that mimics backdoors such as Back Orifice and NetBus, monitoring any login attempts. The version of FakeBO running on the remote host has a remote stack- based buffer overflow vulnerability. A remote attacker could exploit this to crash the...
Multiple Unix Netstat Service Remote Information Disclosure
The remote host is running a 'netstat' service on this port. The 'netstat' service provides useful information to an attacker, since it gives away the state of the active connections. It is recommended that you disable this service if you do not use it. C Tenable Network Security, Inc. include...
Systat Service Remote Information Disclosure
The 'systat' service provides useful information to an attacker, such as which processes are running, who is running them, and so on. It is highly recommended that you disable this service. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10275; scriptversion...
Identd Service Detection
The remote host is running an ident also known as 'auth' daemon. The 'ident' service provides sensitive information to potential attackers. It is designed to say which accounts are running which services. This helps attackers to focus on valuable services those owned by root or other privileged...
in.fingerd Pipe Input Arbitrary Command Execution
It is possible to force the remote finger daemon to execute arbitrary commands by issuing requests like : finger |commandtoexecute@target An attacker may use this bug to gain a shell on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10126; scriptversion...
Multiple FTP Server Command Handling Overflow
The remote FTP server closes the connection when a command or argument is too long. This is probably due to a buffer overflow and may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; ifdescription...
Echo Service Detection
The remote host is running the 'echo' service. This service echoes any data which is sent to it. This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host. C Tenable Network Security, Inc...
CVE-1999-0564
An attacker can force a printer to print arbitrary documents e.g. if the printer doesn't require a password or to become disabled...
PT-1999-1083 · Quakenbush · Quakenbush Nt Password Appraiser
Name of the Vulnerable Software and Affected Versions: Quakenbush NT Password Appraiser demo version Description: The issue concerns the transmission of passwords in plaintext over the network. Recommendations: For the demo version of the Quakenbush NT Password Appraiser, consider disabling the...
PT-1999-1012 · Microsoft · Windows Nt Ftp Server
Name of the Vulnerable Software and Affected Versions: Windows NT FTP server affected versions not specified Description: The issue allows an attacker to log into the FTP server using any username and password when the guest account is enabled without a password. Recommendations: For Windows NT F...
CVE-1999-1061
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging...
PT-1997-1015 · Microsoft +1 · Internet Explorer +1
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 3.x through 4.x Netscape versions 2.x through 4.x Description: The issue allows remote attackers to monitor a user's web activities. This is related to JavaScript in the affected browsers. Recommendations: For...
PT-1996-1028 · Perl · Suidperl +1
Name of the Vulnerable Software and Affected Versions: sperl affected versions not specified suidperl affected versions not specified Description: The issue concerns the suidperl and sperl programs, which fail to relinquish root privileges when switching UIDs back to the original users. This allo...
Kerio Personal Firewall Replay Attack and Buffer Overflow
Advisory ID Internal CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Names: CAN-2003-0219, CAN-2003-0220 Title: Kerio Personal Firewall Replay Attack and Buffer Overflow Class: Design Error; Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted...
PT-2010-5625 · Openldap +1 · Libldap +3
Name of the Vulnerable Software and Affected Versions: openldap versions 2.2.13 through 2.4.22 openldap versions prior to 2.4.35 openldap-clients-2.2.13 openldap-servers-2.2.13 openldap-servers-sql-2.2.13 openldap-devel-2.2.13 compat-openldap-2.1.30 libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev...
PT-2011-5224 · Popt +3 · Popt +3
Name of the Vulnerable Software and Affected Versions: RPM versions 4.4.x through 4.9.x rpm package affected versions not specified rpm-devel affected versions not specified rpm-devel-32bit affected versions not specified rpm-devel-64bit affected versions not specified rpm-32bit affected versions...
PT-2004-3700 · Lynx +2 · Lynx +2
Name of the Vulnerable Software and Affected Versions: Lynx versions 2.8.6 and earlier Description: The issue is related to multiple vulnerabilities in the Lynx package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can ...
PT-2009-6710 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: OpenSSL versions 0.9.8i and earlier Description: The issue allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys. Exploitation of this issue can lead to a violation of...
