David Harris Pegasus Mail 3.12 - File Forwarding

source: https://www.securityfocus.com/bid/1738/info It is possible for a malicious website operator to obtain copies of known files on a remote system if a website visitor is running Pegasus Mail client. If the following code were to be inserted into a HTML document and a user were to load that...

David Harris Pegasus Mail 3.12 - File Forwarding

David Harris Pegasus Mail 3.12 - File Forwarding source: https://www.securityfocus.com/bid/1738/info It is possible for a malicious website operator to obtain copies of known files on a remote system if a website visitor is running Pegasus Mail client. If the following code were to be inserted in...

CVE-2000-0217

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program...

CVE-2000-0217

Technical details about CVE-2000-0217 are not provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, or remediation. Monitor for updates in the available sources.

ssh-xauth.txt

The default SSH configuration for SSH1 and SSH2 allow for remote controlling of X sessions through X forwarding. All children of the SSH connection are able to tunnel X11 sessions through the X tunnel to the client X11 session. This is accomplished by running xauth upon logging in. If xauth is...

CVE-2000-0217

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program...

PT-2000-1199 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. Recommendations: At the moment, the...

EUVD-1999-0509

IP forwarding is enabled on a machine which is not a router or firewall...

CVE-1999-0511

IP forwarding is enabled on a machine which is not a router or firewall...

CVE-1999-0511

CVE-1999-0511 covers IP forwarding being enabled on a host that is not a router or firewall. Multiple connected sources confirm this condition and document remediation: disable IP forwarding (e.g., sysctl net.ipv4.ip_forward and related settings) and reboot where applicable. IBM bulletin notes a ...

CVE-1999-0511

IP forwarding is enabled on a machine which is not a router or firewall...

CVE-1999-0529

CVE-1999-0529 covers a routing/firewall issue where devices forward packets that claim to originate from IANA-reserved or private addresses (e.g., 10.x.x.x, 127.x.x.x, 217.x.x.x). The vulnerability is described as IP spoofing by bypassing source-address checks on routers/firewalls, with potential...

CVE-1999-0775

Cisco Gigabit Switch routers running IOS are affected by CVE-1999-0775 due to improper handling of the established keyword in an access list, enabling remote attackers to forward unauthorized packets. Affected software is described as Cisco Gigabit Switch routers with IOS; specific vulnerable ver...

CVE-1999-0775

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list...

Fortech Proxy+ 2.30 - Remote Administration

Fortech Proxy+ 2.30 - Remote Administration source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default whic...

Fortech Proxy+ 2.30 - Remote Administration

source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can accomodate for anonymous packet...

ssh2-remote-forward.txt

Date: Wed, 30 Dec 1998 00:04:47 +1100 From: Darren Reed To: [email protected] Subject: ssh2 security problem and patch fwd This just came across the ssh list...I've deleted the patch for brievity original length was some 2900 lines. From [email protected] Tue Dec 29 23:13:34 EDT 1998 From:...

CVE-1999-0775

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list...

CVE-1999-0529

A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc...

PT-1999-1180 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves a router or firewall forwarding external packets that claim to come from inside the network it is protecting. This can potentially allow unauthorized access or...