4401 matches found
CVE-2002-1227
PAM 0.76 treats a disabled password as if it were an empty null password, which allows local and remote attackers to gain privileges as disabled users...
LabVIEW Web Server HTTP Get Newline DoS
It was possible to kill the web server by sending a request that ends with two LF characters instead of the normal sequence CR LF CR LF CR = carriage return, LF = line feed. An attacker can exploit this vulnerability to make this server and all LabView applications crash. C Tenable Network...
CVE-2002-0536
PHPGroupware 0.9.12 and earlier, when running with the magicquotesgpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack...
Microsoft Windows - Local Users Information : Disabled Accounts
Using the supplied credentials, Nessus was able to list local user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10913; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Local User...
Microsoft Windows - Local Users Information : Automatically Disabled Accounts
Using the supplied credentials, Nessus was able to list local user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10911;...
Microsoft Windows - Users Information : Automatically Disabled Accounts
Using the supplied credentials, Nessus was able to list user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10895;...
Microsoft Windows - Users Information : Disabled Accounts
Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...
Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability ========================================================================== Revision 1.0 For Public Release 2002 February 07...
Переполнение буфера в gdm (buffer overflow)
Remote root при обработке XDMCP запрещен по-умолчанию...
Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled.
Hi It's possible to crash Cisco Catalyst 2900XL with a empty UDP packet to port 161 when SNMP is disabled. Other switches also? The crash only occurs when the switch is booted with SNMP disabled. Seems that SNMP is listening, even if SNMP is disabled.. ? I have only tested this with Software...
[SECURITY] [DSA-044-1] mailx local exploit
Package : mailx Problem type : buffer overflow Debian-specific: no The mail program a simple tool to read and send email as distributed with Debian GNU/Linux 2.2 has a buffer overflow in the input parsing code. Since mail is installed setgid mail by default this allowed local users to use it to...
[SAFER] Security Bulletin 010125.DOS.1.5
S.A.F.E.R. Security Bulletin 010125.DOS.1.5 TITLE : Netscape Enterprise Server - REVLOG request problem DATE : January 25, 2001 NATURE : Denial-of-Service AFFECTED : Netscape Enterprise Server 3.x with Web Publishing enabled PROBLEM: Problems exists that allows remote user to crash Netscape...
Дырки в iCal
При установки отключается X-авторизация, кроме того файлы устанавливаются открытыми на запись...
[SECURITY] New version of ntop released
Package : ntop Problem type : remote exploit Debian-specific: no The updated version of ntop 1.2a7-10 that was released on August 5 was found to still be insecure: it was still exploitable using buffer overflows. Using this technique it was possible to run arbitrary code as the user who ran ntop ...
Security Bulletin (MS00-034)
Microsoft Security Bulletin MS00-034 - -------------------------------------- Patch Available for "Office 2000 UA Control" Vulnerability Originally Posted: May 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Office 2000 and Office 200...
CVE-1999-0526
CVE-1999-0526 relates to an X server with access control disabled (e.g., via xhost +), allowing any host to connect to the X server. The vulnerability is documented with a high impact: confidentiality, integrity, and availability could be compromised through to keystroke exposure and session take...
Class-Name Injection
Tested on 1.8.0-beta-5 In safe mode with html markup disabled, it is possible to insert any classname into a code block like this: \js any-class-name with spaces code \ renders as: code infostring needs some cleanup here:...
Windows 10 update history
None None...
