Watchguard Firewall Elevated Privilege Vulnerability

I have found that the embedded Linux-based Watchguard Firebox II Firewall product range is vulnerable to read-write access using only a read-only passphrase. This gives a read-only user the ability to make changes to the firewall remotely without either authorization or a read-write passphrase. T...

Zope DTML Role Issue

For those of you that haven't seen it, this is the advisory that came across the zope list regarding the DTML role issue. Begin Advisory Brian Lloyd [email protected] Fri, 8 Dec 2000 15:48:52 -0500 Hi all, Aleksander Salwa has brought a security issue to our attention that affects all Zope...

Microsoft IIS Unicode Remote Command Execution

The hotfix for the 'Webserver file request parsing' problem has not been applied. This vulnerability can allow an attacker to make the remote IIS server execute arbitrary commands. %NASLMINLEVEL 70300 Approved 22Apr01 jao replaces older version This script was first written Renaud Deraison then...

MS00-070: LPC and LPC Ports Vulnerabilities patch (266433)

The hotfix for the 'Multiple LPC and LPC Ports Vulnerabilities' has not been applied on the remote Windows host. These vulnerabilities allow an attacker gain privileges on the remote host, or to crash it remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10525;...

MS00-066: Malformed RPC Packet patch (272303)

The hotfix for the 'Malformed RPC Packet' problem has not been applied. This vulnerability allows a malicious user to launch a denial of service against this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10509; scriptversion"1.46"; scriptcvsdate"Date: 2018/11/...

MS00-062: Local Security Policy Corruption (269609)

The hotfix for the 'Local Security Policy Corruption' problem has not been applied. This vulnerability allows a malicious user to corrupt parts of a Windows 2000 system's local security policy, which could prevent this host from communicating with other hosts in this domain. C Tenable Network...

MS00-053: Service Control Manager Named Pipe Impersonation patch (269523)

The hotfix for the 'Service Control Manager Named Pipe Impersonation' problem has not been applied. This vulnerability allows a malicious user, who has the right to log on this host locally, to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...

Net Tools PKI server exploits

ISSUE 1 There is a vulnerability in an OEM version of software incorporated within the Net Tools PKI Server product. An attacker can, under rare circumstances, gain unauthorized access to the computer hosting the Enrollment and/or Administrative Web servers of the Net Tools PKI. The vulnerability...

SmartFTP Daemon v0.2 Beta Build 9 - Remote Exploit

I found a bug in the SmartFTP-D Server which will give an attacker full access to the server, if he has the right to write files on the server. For every user, the program is checking if a special Userfile exists Sample: Username=hacker & Userfile=hacker.FTPUser. If it exists, the configuration,...

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (MS00-040) (2)

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service MS00-040 2 source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially...

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (MS00-040) (2)

source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting the machine would be required in...

MS00-029: NT IP Fragment Reassembly Patch Not Applied (jolt2) (259728)

The hotfix for the 'IP Fragment Reassembly' vulnerability has not been applied on the remote Windows host. This vulnerability allows an attacker to send malformed packets, which will utilize 100% of the computer CPU, making it nearly unusable for the legitimate users. C Tenable Network Security,...

MS00-036: NT ResetBrowser frame & HostAnnouncement flood patch (262694)

The hotfix for the 'ResetBrowser Frame' and the 'HostAnnouncement flood' has not been applied. The first of these vulnerabilities allows anyone to shut down the network browser of this host at will. The second vulnerability allows an attacker to add thousands of bogus entries in the master browse...

jolt2 - Remote DoS against NT, W2K, 9x

BindView Security Advisory -------- Jolt2 - Remote Denial of Service attack against Windows 2000, NT4, and Win9x Issue Date: May 19, 2000 Contact: [email protected] Topic: Fragmented IP packets cause denial of service Overview: Sending large numbers of identical fragmented IP packets to a...

CVE-1999-0253

Summary: CVE-1999-0253 describes an information-disclosure flaw in IIS 3.0 with the iis-fix hotfix, where remote attackers could disclose ASP source by appending %2e in the URL. Affected product: Microsoft IIS 3.0 (with iis-fix) as documented in Red Hat, NVD/NVD-like records and Nessus entry; mul...

CVE-1999-0662

A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete...

CVE-1999-0662

CVE-1999-0662 is described in the connected docs as an “Outdated or incorrect version” issue affecting multiple vendors. The Red Hat/F5 entries confirm it is a patch-related vulnerability tied to outdated service packs or non-up-to-date software, with F5 listing explicit vulnerable version ranges...

iis4_remote_DoS.txt

Subject: IIS 4.0 remote DoS MS99-029 To: [email protected] Hi, I found a kind of DoS attack against IIS 4.0 on NT SP4 & SP5. I reported it to MS and they've provided HotFix for this. Problem Description ------------------- Simple play. I sent lots of "Host:aaaaa...aa" to IIS like... GET /...

Microsoft IIS 2.03.0 - Appended Dot Script Source Disclosure

Microsoft IIS 2.03.0 - Appended Dot Script Source Disclosure source: https://www.securityfocus.com/bid/2074/info Microsoft Internet Information Server IIS is a popular web server, providing support for a variety of scripting languages, including ASP active server pages. IIS 2.0 and 3.0 suffer fro...

Microsoft IIS 2.0/3.0 - Appended Dot Script Source Disclosure

source: https://www.securityfocus.com/bid/2074/info Microsoft Internet Information Server IIS is a popular web server, providing support for a variety of scripting languages, including ASP active server pages. IIS 2.0 and 3.0 suffer from an issue allowing a remote user to retrieve the source code...