7719 matches found
Vulnerability in OpenSSL CVE-2002-0656
A buffer overflow allowed remote attackers to execute arbitrary code by sending a large client master key in SSL2 or a large session ID in SSL3...
Security Bulletin #209
Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00209 Date: October 22, 2001 Cross-Ref: CERT Vulnerability Note VU327281 Title: rpc.yppasswdd The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the...
Solaris rpc.yppasswdd does not adequately check input allowing users to execute arbitrary code
Overview A remotely exploitable buffer overflow exists in the 'rpc.yppasswd' service on Solaris 2.6, 2.7, and 2.8. Description Network Information Service NIS provides a simple network lookup service consisting of databases and processes. Its purpose is to provide information, that has to be know...
Security Advisory FreeBSD-SA-01:59.rmuser
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:59 Security Advisory FreeBSD, Inc. Topic: rmuser contains a race condition exposing /etc/master.passwd Category: core Module: rmuser Announced: 2001-09-04 Credits:...
CVE-2000-0924
The CVE-2000-0924 entry describes a directory traversal in Armada Master Index’s search.cgi, exploitable via the catigory parameter using .. to read arbitrary files. Affected component: search.cgi. Impact: partial confidentiality loss. Exploit details and patch availability are not provided in th...
Master Index search.cgi Traversal Arbitrary File/Directory Access
The version of Master Index running on the remote web server has a directory traversal vulnerability. Input to the 'catigory' parameter of search.cgi is not properly sanitized. A remote attacker could exploit this to read arbitrary files from the system. %NASLMINLEVEL 70300 C Tenable Network...
SLA-16.MasterIndex.txt
Synnergy Laboratories Advisory SLA-2000-16 NAME Master Index directory traversal vulnerability AFFECTED Linux/UNIX with Master Index SYNOPSIS Synnergy Labs has found a flaw within Master Index that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...
Master Index traverse advisory
Synnergy Laboratories Advisory SLA-2000-16 NAME Master Index directory traversal vulnerability AFFECTED Linux/UNIX with Master Index SYNOPSIS Synnergy Labs has found a flaw within Master Index that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...
Локальная уязвимость iKey
Мастер-ключ хранится в EPROM, может быть извлечен или подменен при наличии физического доступа к устройству...
Armada Design Master Index 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/1772/info Master Index is a commercially supported search engine. Certain versions of this software ship with a path traversal vulnerability. This is to say that a remote user may 'back out' .../ of the web root directory and view/download any file which...
CVE-2000-0404
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability...
CVE-2000-0404
The CVE-2000-0404 issue affects the CIFS Computer Browser service and allows remote denial of service by sending a ResetBrowser frame to the Master Browser ("ResetBrowser Frame" vulnerability). Connected sources confirm the vulnerability impact is a network-denial of service and describe two rela...
CVE-2000-0404
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability...
CVE-2000-0112
The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...
CVE-2000-0112
The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...
IKE - Aggressive Mode Shared Secret Hash Leakage
IKE - Aggressive Mode Shared Secret Hash Leakage source: https://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This ma...
CVE-1999-1256
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file...
PT-2009-6689
Name of the Vulnerable Software and Affected Versions ISC BIND versions prior to 9.4.3-P3 ISC BIND versions prior to 9.5.1-P3 ISC BIND versions prior to 9.6.1-P1 liblwres40 affected versions not specified libisccfg40 affected versions not specified libisc45 affected versions not specified...
