2983 matches found
CVE-2000-1212
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects...
Pine (Local Message Grabber) - Local Message Read
Pine Local Message Grabber - Local Message Read !/bin/sh Grab local pine messages Usage: ./monpine.sh victim pine must use following settings [email protected] http://hacksware.com x enable-alternate-editor-cmd x enable-alternate-editor-implicitly editor = /usr/bin/vi PID=$1 PICOFILE=printf...
Проблемы с WinVNC
Создаваемый ключ в реестре содержит пароли администрирования и позволяет редактирование пользователем. Пароли хранятся в обратимом виде...
CVE-2000-0264
The CVE-2000-0264 entry concerns Panda Security 3.0 where registry editing is disabled but users can still edit the registry and gain privileges by directly executing a .reg file or via other methods. Specifically, the underlying issue is that the registry can be modified in a context that yields...
Black Watch Labs Vulnerability Alert
Dear Security Professional, The following vulnerability: "Lotus Domino Server Misconfiguration – Documents Can Be Modified over the Web" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black...
CVE-2000-0264
Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods...
Panda Security 3.0 - Multiple Vulnerabilities
Panda Security 3.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1119/info Panda Security is a user management application for Windows 9x. With it, certain functions can be prohibited for specific users. One of the restrictive policies possible is to disable registry editin...
Panda Security 3.0 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1119/info Panda Security is a user management application for Windows 9x. With it, certain functions can be prohibited for specific users. One of the restrictive policies possible is to disable registry editing. However, even with this feature activated,...
NXT-Howto.txt
+-------------------------------------------------------+ |BIND 8.2 - 8.2.2 Remote root Exploit How-To by E-Mind| +-------------------------------------------------------+ A What is a DNS? 1. How do I query a DNS? 2. How do I find a vulnerable DNS? B How do I edit DNS entries? 1. How do I find a...
Microsoft Windows NT 4.0 - DCOM Server
source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry keys associated with DCOM server...
foolproof.txt
Fooling Foolproof Security By Nightmare Foolproof security is a program that runs on a windows 9x box. The purpose of foolproof I guess is to keep people that don't know really know what they are doing from messing with stuff. It can be quite a annoying program if you are trying to do anything wi...
irix.midikeys.txt
Date: Wed, 19 May 1999 11:25:59 -0400 From: Larry W. Cashdollar To: [email protected] Subject: IRIX midikeys root exploit. Aleph1, Please forgive me if this has already been on this list. I searched geek-girl with no luck. I have been auditing our IRIX boxes and found what I believe to be a ne...
admintool.sh
setenv DISPLAY yourdisplay:0.0 ln -s /.rhosts /tmp/.group.lock /usr/bin/admintool browse - group - edit a group - get an error message - exit echo "+ +" .rhosts /usr/bin/rsh localhost -l root "/usr/openwin/bin/xterm&"...
nt.system.policies.txt
Date: Wed, 3 Feb 1999 22:41:52 -0000 From: mnemonix To: [email protected] Subject: Inherent weaknesses in NT system policies There are certain key vulnerabilities in NT's System Policies that allow most restrictions to be by-passed. For instance, although Registry Editing tools can be disabled...
freestats-cgi.txt
Date: Sat, 21 Nov 1998 12:54:41 -0500 From: John Carlton To: [email protected] Subject: Freestats.com CGI vulnerability About a year ago I developed an exploit for the free web stats services offered at freestats.com, and supplied the webmaster with proper code to patch the bug. After hearing ...
SGI IRIX 6.5.4 - midikeys Root
SGI IRIX 6.5.4 - midikeys Root source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds...
SGI IRIX 6.5.4 - midikeys Root
source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds, and then songs will bring up ...
Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access
Microsoft Internet Explorer 45 - DHTML Edit ActiveX Control File Stealing Cross Frame Access source: https://www.securityfocus.com/bid/116/info Vulnerabilities in an ActiveX control distributed with Internet Explorer 5 and available for Internet Explorer 4 allow malicous web sites to steal local...
Microsoft Internet Explorer 4/5 - DHTML Edit ActiveX Control File Stealing / Cross Frame Access
source: https://www.securityfocus.com/bid/116/info Vulnerabilities in an ActiveX control distributed with Internet Explorer 5 and available for Internet Explorer 4 allow malicous web sites to steal local files and to bypass cross-frame security rules. The DHTML Edit Control Safe for Scripting...
