Citrix Nfuse 1.51 - Webroot Disclosure

Citrix Nfuse 1.51 - Webroot Disclosure source: https://www.securityfocus.com/bid/2956/info Citrix Nfuse is an application portal server meant to provide the functionality of any application on the server via a web browser. Nfuse works in conjunction with a previously-installed webserver. It has...

DoS в IBM NetCommerce (macro.d2w buffer overflow)

Переполнение буфера при длинном запросе к макросу macro.d2w. Кроме того, возможно узнать физическое расположение файлов...

IE5 crash

Hi stumbled across this crash for IE..I am on 5.00.2614.3500 in Win98SE it seems pretty reproducable with an illegal op in URLMON.dll 1 create a web page local is fine and put in an image to one of your servers..this crash dosent even need an image extension on it...just aim it at a directory or...

Дырки в WFTPD

Большое число расширенных ASCII-символов в строке приводит к переполнению буфера. Кроме того, имеется несколько недокументированных макросов, например C позволяет выяснить физическое расположение файлов...

Небольшая проблема в IBM Net.Data (path retrieval)

Можно мполучить информацию о физическом расположении файлов...

Microsoft Internet Explorer 5.5 - Index.dat (MS00-055)

Microsoft Internet Explorer 5.5 - Index.dat MS00-055 source: https://www.securityfocus.com/bid/1978/info IE 5.5 and possibly other versions stores recently visited URLs and cache folder names in a local file called index.dat. This file is kept in the following known locations: Windows 9x:...

CVE-2000-0854

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document...

Дырки в Ceilidh

Возможно провести DoS-атаку против машины, запустив множественные экземпляры приложения, можно узнать физическое расположение файлов, кроме того имеются переполнения буфера...

CVE-1999-0799

Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location...

winreal.6-7.txt

Win32 Realplayer 6/7 Buffer Overflow Vulnerability Summary: ---------------------- There is a buffer overflow in the Win32 RealPlayer Basic client, versions 6 and 7. This appears to occur when 299 characters are entered as a 'location' to play, such as http://aaaaa..... with 300 a's. I have teste...

asp.runtime-error.txt

Forwarded with permission of the author. Please direct all replies to [email protected]. Ben Greenbaum Director of Site Content Security Focus http://www.securityfocus.com ---------- Forwarded message ---------- Description: ============ Active server pages ASP with runtime errors expose a security...

CERN httpd Virtual Web Path Disclosure

The remote host appears to be running CERN httpd. It was possible to get the physical location of a virtual web directory by issuing the request : GET /cgi-bin/ls HTTP/1.0 A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc";...

Microsoft Internet Explorer 5.0/4.0.1 - JavaScript URL Redirection (MS99-043)

Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Microsoft Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 Javascript URL Redirection Vulnerability source: https://www.securityfocus.com/bid/722/info A malicious web site operator could design a web...

winamp.2.x.bof.txt

Date: Wed, 12 May 1999 13:02:43 +0200 From: Wojtek Kaniewski To: [email protected] Subject: Buffer overflow in WinAMP 2.x Introduction ------------ WinAMP is a popular Windows sound player with support for many file formats MP3, wave files, modules. It also supports MP3 streaming let's call it...

CVE-1999-0782

KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable...

CVE-1999-0799

Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location...

Security update 1970-01-01

...

Security update 1970-01-01

...

Security update 1970-01-01

...

Security update 1970-01-01

...