3671 matches found
CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
DEBIAN-CVE-2005-1454
SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...
CVE-2001-0902
Microsoft IIS 5.0 is affected. The vulnerability allows remote attackers to spoof web log entries by sending HTTP requests containing hex-encoded newline or form-feed characters, enabling log pollution/improper logging. CVE-2001-0902 details indicate impact to log integrity (partial) and potentia...
CVE-2004-0432
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions...
Mandrake Linux Security Advisory : pine (MDKSA-2001:047-1)
Versions of the Pine email client prior to 4.33 have various temporary file creation problems, as does the pico editor. These issues allow any user with local system access to cause any files owned by any other user, including root, to potentially be overwritten if the conditions were right. Upda...
dnsPoison.cpp.txt
Symantec Enterprise Firewall dnsd proxy, versions 8 and later, is vulnerable to cache poisoning attacks when acting as a caching nameserver. Is possible to inject false entries in its cache and make a false DNS server look like authoritative of a zone, when it is not. Once this information is...
CVE-2003-0683
NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions...
Windows 2000 multiple bugs
Windows 2000 Internet Key Exchange Selects Incorrect Certificate, Update to Help Prevent Cross-Forest Certificate Enrollment, Update to Verify cbDestLength in the Imaadpcm Component, Zones Removed from the Registry When You Start the DNS Service, Account Replication Latency Causes Certificate...
CVE-2003-0388
CVE-2003-0388 concerns the pam_wheel module in Linux-PAM where, if the trust option is enabled and use_uid is disabled, local users can spoof getlogin() results and potentially gain privileges. The issue affects Linux-PAM versions up to 0.77 (notably around the pam_wheel and pam_lastlog handling ...
CVE-2002-1410
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...
EUVD-2002-1393
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...
SSGBook 1.0 - Image Tag HTML Injection
source: https://www.securityfocus.com/bid/5915/info SSGbook includes codes for allowing users to specify HTML formatting and layout inside of guestbook entries. For example, a user can include an image by including it inside of image or img tags. However, arbitrary HTML and script code are not...
Ben Chivers Easy Guestbook 1.0 - Administrative Access
Ben Chivers Easy Guestbook 1.0 - Administrative Access source: https://www.securityfocus.com/bid/5341/info The vulnerability has been reported for Easy Guestbook 1.0. It is possible for an atttacker to modify any user's guestbook by deleting entries. The vulnerability is the result of Guestbook...
Easy Guestbook Vulnerabilities
AresU Advisory 19/July/2002 Easy Guestbook Vulnerabilities Severity : High Possible to edit member homepage Systems Affected: Easy Guestbook v1.0 Vendor URL : http://www.easyscripts.co.uk Vuln Type : It does not use Access Validation to delete the entries and login as Admin Control. Author : Ares...
CVS (Web-Based) Entries File Information Disclosure
The remote web server allows access to a 'CVS/Entries' file and thereby exposes file names in the associated repository. %NASLMINLEVEL 70300 This script was written by Nate Haggard SecurityMetrics inc. See the Nessus Scripts License for details Changes by Tenable: - pattern matching to determine ...
Arp spoofing в CISCO
ARP-пакет позволяет переписать arp-запись...
Большая дырка в ssh (unauthorized access)
Если в файле паролей запись о пароле пользователя состоит из двух символов или менее это часто применяется для слудебных щаписей не относящихся к пользователям то ssh позволяет войти с такой записью без пароля...
CVE-2024-2056
creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2024-03-05 21:26:38+00:00| seen| https://t.me/ctinow/200709 2024-03-05 21:26:51+00:00| seen| https://t.me/ctinow/200718...
vixie-cron - Local Privilege Escalation
vixie-cron - Local Privilege Escalation !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo...