Essentia Web Server 2.1 - URL Remote Buffer Overflow

Essentia Web Server 2.1 - URL Remote Buffer Overflow // source: https://www.securityfocus.com/bid/4159/info Essentia Web Server is a multi-threaded HTTP server designed for Microsoft Windows and Linux environments. Essentia is maintained by Essen. Essentia is prone to a remote denial of service...

why i love xs4all + mediaplayer thingie

Why i love xs4all rant you'll probably wanna skip this but i need to get this out of my system: a few weeks back i was unpleasantly suprised by the fact that my internet wasn't working the support desk employee after making me reset my modem a dozen times and tripple checking my settings finaly...

CVE-2002-2170

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request...

HP CIFS9000 Server A.01.05A.01.06 - Local Buffer Overflow

HP CIFS9000 Server A.01.05A.01.06 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to ro...

Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set Revision 1.0 For Public Release 2002 September 05 UTC 1500 ---------------------------------------------------------------------- Contents Summary Affected Products Detail...

Lotus Domino Web Server discloses IP address

Overview Lotus Domino Web server discloses its IP address to some HTTP requests. Description Lotus Domino can be coerced to reveal its IP address by sending it a crafted HTTP request. --- Impact Attackers can discover limited information about the numbering of the Domino server's network. ---...

CVE-2002-0570: Undefined Security Weakness

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key...

CVE-2002-0134

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command...

CVE-2001-1169: Undefined Security Weakness

keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo...

CVE-2000-0551

The CVE-2000-0551 entry concerns Danware NetOp 6.0, whose file transfer mechanism reportedly does not require authentication. This allows remote attackers to access and modify arbitrary files, per the description. The connected documents confirm the affected product and the underlying issue (unau...

CVE-2001-1006: Undefined Security Weakness

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...

Внедрение данных в tinc (data injection)

Протокол не защищает от вставки данных...

CVE-2001-0524: Undefined Security Weakness

eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier...

CVE-2001-0056: Undefined Security Weakness

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

CVE-2001-0133

CVE-2001-0133 affects Interscan VirusWall 3.6.x and earlier. The web administration interface reportedly does not use encryption, enabling remote attackers to obtain the administrator password by sniffing credentials sent during login or via setpasswd.cgi and other HTTP GET requests that transmit...

Two Holes in Sun Cluster 2.x

Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service called clustmon that runs on port 12000. It...

CVE-1999-0791: Undefined Security Weakness

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

CVE-2000-0757: Undefined Security Weakness

The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed...

CVE-2000-0278

The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user...

CVE-2000-0068

daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...