4896 matches found
ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
CVE-2002-0410
sendmessage.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded...
Remote quake 2 3.2x server cvar leak
Hello, A problem exists in the Quake II Server for any OS probably all versions; tested 3.20 and 3.21 discovered by 'Redix' that allows server cvars containing sensitve information to be leaked. This has been known for a little over 2 months, I run several Q2 servers and only learned of it today...
Information leakage in Quake2
It's possible to retrieve any server variables vaules including $rconpassword by using modified client without $-variables expanding...
CVE-2001-0976
HP Process Resource Manager (PRM) C.01.08.2 and earlier, used by HP-UX Workload Manager (WLM), is vulnerable to local privilege escalation via manipulated libraries or environment variables. Root privileges can be gained by a local user due to the underlying insecure handling of library paths and...
CVE-2001-0976
Vulnerability in HP Process Resource Manager PRM C.01.08.2 and earlier, as used by HP-UX Workload Manager WLM, allows local users to gain root privileges via modified libraries or environment variables...
CVE-2001-0976: Undefined Security Weakness
Vulnerability in HP Process Resource Manager PRM C.01.08.2 and earlier, as used by HP-UX Workload Manager WLM, allows local users to gain root privileges via modified libraries or environment variables...
CVE-1999-1082: Undefined Security Weakness
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" modified dot dot attack...
Дырка в pico
Проблема символьных линков при сохранении измененных файлов...
CVE-2000-0359: Undefined Security Weakness
Buffer overflow in Trivial HTTP THTTPd allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header...
CVE-2000-0288: Undefined Security Weakness
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable...
CVE-1999-0663: Undefined Security Weakness
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified...
CVE-1999-0820
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands...
SAFER+attack.txt
Date: Wed, 30 Dec 1998 01:41:59 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Academic Attacks on SAFER+ Forwarded From: "Jay D. Dyson" Originally From: John Kelsey I believe I have found two attacks on the SAFER+ version with 256-bit keys. While these attacks aren't practical, they...
PT-1999-1252 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A system-critical program, library, or file has a checksum or other integrity measurement that indicates it has been modified. Recommendations: At the moment, there is no informatio...
CVE-1999-1232
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program...
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the...
Microsoft Windows NT 4.0 SP5 / Terminal Server 4.0 - 'Pass the Hash' with Modified SMB Client
source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need for the user to "decrypt" the...
