CVE-2004-0677: Undefined Security Weakness

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

smbmnt privilege escalation

Few distributions have smbmnt installed suid root. It allows user to mount external drive and run any application as suid...

CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.202 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model...

Watchguard ServerLock protection bypass

With DLL injection technique and symlinks to /DEVICE it's possible to bypass kernel drive loading protection...

CVE-2002-0479: Undefined Security Weakness

Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...

CVE-2001-0933: Undefined Security Weakness

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:"...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-1999-1174: Undefined Security Weakness

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

Citrix Client Access Verification

Your professional opinions are appreciated. About a month ago I had posted the below as a Citrix Client Access Advisory and got several responses to the fact that it either it was not a valid vulnerabilty or that it was a default configuration problem. which may be true. but consider this. The...

CVE-2001-0695

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

EFTP Version 2.0.7.337 vulnerabilities

EFTP Version 2.0.7.337 vulnerabilities According to their site @ www.eftp.org "EFTP is a 32bit combined Client/Server application, basically 2 programs in one. EFTP incorporates the 448bit Blowfish Encryption Algorithm and the FTP protocol RFC 959 implementation to provide secure file transfers...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-2001-0695

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

CVE-2001-0695: Undefined Security Weakness

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

CVE-2001-0110

Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable...

CVE-2001-0110

CVE-2001-0110 describes a buffer overflow in jazip (Zip/Jaz drive manager) that allows local users to gain root privileges by supplying a long DISPLAY environment variable. OpenVAS/DSA references confirm Debian jazip packages were vulnerable and later fixed; the advisory notes a workaround: the p...

CVE-2001-0110: Undefined Security Weakness

Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable...

CVE-2001-0038: Undefined Security Weakness

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter e.g. C: in the requested URL...

Vulnerability in jaZip.

Dear, Bugtraq. jaZip is a program for managing an Iomega Zip or Jaz drive. It is often installed setuid root - and because of a buffer overflow it is possible for regular users to become root. Please excuse me if this was know. Please note that I can not guarantee that this information is correct...

CVE-2000-0376

CVE-2000-0376 affects i-drive Filo: when the setup installs an HTTP proxy server, an attacker can send an overly long HTTP GET request, overflowing a heap buffer and enabling remote code execution. Affected: Filo 1.0.0.1 for Windows NT (SP5). Mitigation: upgrade to Filo 1.5.3. The vulnerability i...