CVE-2001-1004

Affected software: gnut Gnutella client prior to 0.4.27. Vulnerability: cross-site scripting via file names containing script tags shared with other clients. Root cause: untrusted file-name content is rendered as script on recipients. Impact: remote script execution on other clients (as described...

[resend] Strumpf Noir Society on BadBlue

Strumpf Noir Society Summaries ! Public release ! -- -= Strumpf Noir Society on BadBlue =- Sorry, couldn't resist.. Ok, so we might not be able to actually drive a Mach truck, but this seems to do the trick, give or take a few millions : Release date: Thursday, January 17, 2002 Introduction BadBl...

[Real Security] Advisory for Nudester 1.10

------------------------- Real Security Advisory 1 Author: Cyph3r www.Real-Security.org Date: 08/16/2001 ------------------------- Vulnerable: Nudester 1.10and below? OS: Win9x/me/2k/nt/xp Site: www.nudester.org ------------------------- - Severity: Malicious users can gain full access to the use...

MacOS Personal Wed Sharing DoS

Hello bugtraq readers and Apple Inc. The problem this time is that when File Sharing is set to check PWS logins, on a about 300char password the system freezes. This problem could be bigger, cause Macintosh File sharing passwords cannot be longer than 8 chars and many apps support File Sharing to...

smbd remote file creation vulnerability

Please hold with approving this one before Monday, if possible. This is a forced release. Author: Michal Zalewski [email protected] Topic: Insufficient parameter validation and unsafe default configuration make numerous systems running samba SMB file sharing daemon vulnerable to remote...

Samba 2.0.x/2.2 - Arbitrary File Creation

source: https://www.securityfocus.com/bid/2928/info Samba is a freely available file and printer sharing application maintained and developed by the Samba Development Team. Samba allows file and printer sharing between operating systems on the Unix and Microsoft platforms. A remote local user can...

Rumpus FTP Server 1.3.x/2.0.3 - Stack Overflow Denial of Service

source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack by making a directory with an unusual number of sub-folders. This...

Maxum Rumpus FTP Server 1.3.21.3.42.0.3 dev - Remote Denial of Service

Maxum Rumpus FTP Server 1.3.21.3.42.0.3 dev - Remote Denial of Service source: https://www.securityfocus.com/bid/2716/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. It is possible to log in remotely to the server and shut down the servic...

Personal Web Sharing remote stop

Personal Web Sharing Remote Stop. Versions affected: Personal Web sharing v1.5.5, probably earlier. Problem: Personal Web Sharing extension, which ships with MacOS 9, can't handle a request longer than 6000 characters. A request, which contains 6000 or more characters seems to stop the file...

Maxum Rumpus FTP Server 1.3.2/1.3.4/2.0.3 dev - Remote Denial of Service

source: https://www.securityfocus.com/bid/2716/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. It is possible to log in remotely to the server and shut down the service by making a directory with a name that is 65 characters long. Users...

Apple Filing Protocol Server Detection

The remote service understands the Apple Filing Protocol AFP and responds to a 'FPGetSrvrInfo' 'DSIGetStatus' request with information about itself. AFP is used to offer file services for Mac OS X as well as the older Mac OS. In the past, it has also been known as 'AppleTalk Filing Protocol' and...

Apple Personal Web Sharing 1.11.51.5.5 - Remote Denial of Service

Apple Personal Web Sharing 1.11.51.5.5 - Remote Denial of Service source: https://www.securityfocus.com/bid/2715/info Apple Personal Web Sharing is a utility that allows users to extend file-sharing abilities across a small intranet. It is shipped with MacOS 9. A user may craft a URL which contai...

Apple Personal Web Sharing 1.1/1.5/1.5.5 - Remote Denial of Service

source: https://www.securityfocus.com/bid/2715/info Apple Personal Web Sharing is a utility that allows users to extend file-sharing abilities across a small intranet. It is shipped with MacOS 9. A user may craft a URL which contains excess characters to cause the file-sharing system to shut down...

Samba 2.0.x - Insecure TMP File Symbolic Link

// source: https://www.securityfocus.com/bid/2617/info Samba is a flexible file sharing packaged maintained by the Samba development group. It provides interoperatability between UNIX and Microsoft Windows systems, permitting the sharing of files and printing services. A problem in the package...

CVE-2000-0979

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level...

CVE-2000-1003

CVE-2000-1003 (Windows 95/98 NETBIOS client) : The NETBIOS client in Windows 95 and Windows 98 is affected. A remote attacker over a network can cause a denial of service by altering a file sharing service to return an unknown driver type, which crashes the client. Root cause described as the fil...

CVE-2000-1003: Undefined Security Weakness

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash...

CVE-2000-0979

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level...

NSFOCUS SA2000-05: Microsoft Windows 9x NETBIOS password verification vulnerability

NSFOCUS Security AdvisorySA2000-05 TopicЈє Microsoft Windows 9x NETBIOS password verification vulnerability Release DateЈє August 24, 2000 Update DateЈє Oct 11 , 2000 Affected SystemЈє ================ - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition - Microsoft...

Gnapster Absolute Path Name Request Arbitrary File Access

An insecure Napster clone e.g. Gnapster or Knapster is running on the remote computer, which allows an intruder to read arbitrary files on this system, regardless of the shared status of the files. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10408; scriptversion...