5640 matches found
Apache Tomcat 4.0.3 - Servlet Mapping Cross-Site Scripting
source: https://www.securityfocus.com/bid/5193/info A vulnerability has been reported for Apache Tomcat 4.0.3 on Microsoft Windows and Linux platforms. Reportedly, it is possible for an attacker to launch a cross site scripting attack. When servlet mapping is enabled, it is possible to invoke...
Protection bypass for linux grsecurity
It's possible to modify kernel memory by using memory mapping...
Falcon Web Server Authentication Circumvention Vulnerability
Strumpf Noir Society Advisories ! Public release ! -- -= Falcon Web Server Authentication Circumvention Vulnerability =- Release date: Wednesday, February 13, 2002 Introduction: Falcon Web Server is a ISAPI and WinCGI supporting web server running on the Microsoft Windows OS's. Falcon Web Server ...
Zope < 2.3.3 ZClass Permission Mapping Modification Local Privilege Escalation
The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for unauthorized access within the Zope...
CVE-2001-0567
Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass...
How to remove .printer mapping (WAS RE: Permanently remove IIS printer mapping)
This is from another list I receive. It explains this scenario rather well. Keith --------------------------------------------------- All IIS Administrators Please Read this Immediately --------------------------------------------------- I wanted to get this out right away. More info to follow. O...
Локальный DoS через mmap в FreeBSD
Из-за некорректной обработки сбоев при отображении страниц памяти возможно завесить систему...
Gauntlet Firewall Vulnerability
In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...
CVE-1999-0824
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...
CVE-1999-0824
CVE-1999-0824 involves Windows NT where a user can use SUBST to map a drive letter to a folder. This mapping is not unmapped after log off, potentially allowing the affected user to influence the location of folders accessed by later users. The description covers the mapping behavior and its pers...
FrontPage 9798 - Server Image Mapper Buffer Overflow
FrontPage 9798 - Server Image Mapper Buffer Overflow source: https://www.securityfocus.com/bid/1117/info The htimage.exe and imagemap.exe files included with FrontPage handle server-side image mapping functions. Under normal operations, it would be passed a map name and a set of coordinates in th...
CVE-1999-1105
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...
CVE-1999-0824
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...
IBM GINA for NT 1.0 - Local Privilege Escalation
source: https://www.securityfocus.com/bid/608/info IBM has written a replacement GINA for Windows NT to allow NT hosts to authenticate against OS/2 domains. On machines running the modified GINA, the creation of a specific Registry key under HKLM\System\CurrentControlSet\Services\IBMNeTNT may all...
netbsd.umapfs.txt
Date: Thu, 18 Mar 1999 00:03:40 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-006 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-006 ================================= Topic: Security hole in umapfs Version: NetBSD 1.3.3 and prior;...
PT-1998-1066 · Bsd · Bsd
Name of the Vulnerable Software and Affected Versions: BSD affected versions not specified Description: The issue concerns the mmap function in BSD, which allows local attackers in the kmem group to modify memory through devices. Recommendations: At the moment, there is no information about a new...
Linux Kernel 2.0/2.0.33 - i_count Overflow (PoC)
/ source: https://www.securityfocus.com/bid/388/info The icount member in the Linux inode structure is an unsigned short integer. It can be overflowed by mapping a single file too many times, allowing for a local user to possibly gain root access on the target machine or cause a denial of service...
Microsoft IIS 2.03.0 - Appended Dot Script Source Disclosure
Microsoft IIS 2.03.0 - Appended Dot Script Source Disclosure source: https://www.securityfocus.com/bid/2074/info Microsoft Internet Information Server IIS is a popular web server, providing support for a variety of scripting languages, including ASP active server pages. IIS 2.0 and 3.0 suffer fro...
