4302 matches found
Проблемы в Compaq Management Software (HTTP proxy)
Web-Сервис установленный на порт 2301 работает как HTTP-прокси при запросе внешнего документа...
CVE-2000-0974
CVE-2000-0974 concerns GnuPG (gpg) 1.0.3 and earlier versions, which fail to properly verify all signatures in a file containing multiple documents. The underlying flaw allows an attacker to modify the contents of all documents after the first without detection, as described in the CVE entry and ...
CVE-2000-0932
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service...
NAV 5.0 and embedded files
Product: Norton Symantec Antivirus Platform: Win32 Versions: 5.0 Problem: Files 'embedded' in Word and Excel documents appear to evade scanning. I have noticed what appears to me to be a disturbing lapse in the scanning procedure of Norton Antivirus 5.0 Win32. I am looking for corroboration and...
CVE-2000-0932
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service...
[SECURITY] New version of tcsh released
Package: tcsh Vulnerability: local exploit Debian-specific: no Proton reported on bugtraq that tcsh did not handle in-here documents correctly. The version of tcsh that is distributed with Debian GNU/Linux 2.2r0 also suffered from this problem. When using in-here documents using the syntax tcsh...
Очередная уязвимость в Internet Explorer (Java Object)
Через OBJECT c CLASSID="JAVA" можно обращаться к локальным документам...
Серьезная дырка в LPR (PostScript shell execution & grog)
При печати PostScript документов выполняются shell-команды содержащиеся в документах, при этом не сбрасывается egid lp, что позволяет получить gid lp, кроме того, в отдельных случаях возможно получить root используя некорректный вызов к программе pic в grog...
Дырка в SiteMinder
С помощью специально сконструированной URL можно получить доступ к закрытым документам, кроме того, можно получить исходные тексты CGI-приложений...
FreeBSD-SA-00:38.zope
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:38 Security Advisory FreeBSD, Inc. Topic: zope port allows remote modification of DTML documents Category: ports Module: zope Announced: 2000-08-14 Credits: Unknown...
Очередная дырка в IE - DHTMLED AttiveX
Элемент ActiveX позволяет редактирование документов, но не проверяет обращение к DOM, что позволяет прочитать любой локальный документ или документ из Intranet - сети...
CVE-2000-0288
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable...
Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1/5.5 - preview Security Zone Settings Lag
Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Internet Explorer 5.0.1 Security Zone Settings Lag Vulnerability source:...
Web Server robots.txt Information Disclosure
The remote host contains a file named 'robots.txt' that is intended to prevent web 'robots' from visiting certain directories in a website for maintenance or indexing purposes. A malicious user may also be able to use the contents of this file to learn of sensitive documents or directories on the...
melissa.macro.virus.txt
Date: Fri, 26 Mar 1999 17:05:51 -0800 From: Aleph One To: [email protected] Subject: Melissa Macro Virus I normally don't allow virus posts through the list as they seldom represent a new threat, just a new example of an already existing one, but this one is getting enough play to warrant a...
microsoft.virus.txt
Date: Sun, 25 Apr 1999 13:13:34 +0100 From: T Bruce Tober Subject: You'd think they'd know better... ...or maybe not. I mean, it is Microcrap we're talking about here, viz this article from Woody's Woody's Office Watch, and if there's anyone more pro-Microsoft it's only Bill G himself,: Read the...
CVE-1999-0564
An attacker can force a printer to print arbitrary documents e.g. if the printer doesn't require a password or to become disabled...
PT-1999-1193 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows an attacker to force a printer to print arbitrary documents, for example, if the printer does not require a password, or to become disabled. Recommendations: At the...
