7604 matches found
Security Bulletin MS02-001
Title: Trusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data Date: 30 January 2002 Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Max Risk: Moderate Bulletin: MS02-001 Microsoft encourages customers to review the Security Bulletin at:...
DEBIAN-CVE-2001-1534
modusertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication...
CVE-2001-1534
modusertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication...
CVE-2000-1052
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet...
CVE-2000-0031
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack...
MS00-006: Microsoft IIS IDA/IDQ Multiple Vulnerabilities (uncredentialed check)
The remote version of IIS is affected by two vulnerabilities : - An information disclosure issue allows a remote attacker to obtain the real pathname of the document root by requesting nonexistent files with .ida or .idq extensions. - An argument validation issue in the WebHits component lets a...
CVE-2000-0397
CVE-2000-0397 affects the EMURL web-based email account software. The vulnerability arises because session URLs encode predictable identifiers, enabling a remote attacker to access a user’s email account. The available documents do not specify affected product versions, root cause beyond predicta...
ht://Dig < 3.1.5 htsearch CGI Multiple Vulnerabilities
The 'htsearch' CGI, which is part of the htdig package, allows anyone to read arbitrary files on the target host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10105; scriptversion"1.36"; scriptcveid"CVE-1999-0978...
CVE-2000-0068
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...
CVE-1999-0684
Denial of service in Sendmail 8.8.6 in HPUX...
CVE-1999-0949
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges...
Multiple FTP Server Command Handling Overflow
The remote FTP server closes the connection when a command or argument is too long. This is probably due to a buffer overflow and may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; ifdescription...
PT-1997-1008 · Isc · Bind
Name of the Vulnerable Software and Affected Versions: BIND affected versions not specified Description: The issue involves DNS cache poisoning via BIND, which is made possible by predictable query IDs. Recommendations: At the moment, there is no information about a newer version that contains a...
CVE-2022-33895
CVE-2022-33895 entry is rejected/not used and does not represent an active vulnerability.
MS:A29156D6-1CC1-4886-8DFB-E8DA07392B3F
...
MS:A8C80707-6242-4EDC-A149-777AB39F356A
...
MS:7C98CF13-0025-4556-B41F-2CB2CF881007
...
MS:E0BD815C-B39E-4BEB-A8AD-8CCE186CC87F
...