Identix BioLogon Client security bug

Aug 3rd, 2001 10:56am Vendor: http://www.identix.com Software: BioLogon 2.0 Client see http://www.identix.com/itsecurity/softwareprod.html Security flaw in Indentix BioLogon 2.0 Client for Windows Identix's BioLogon software is used as the software "glue" to tie together various biometric devices...

CVE-2000-0978

The CVE-2000-0978 entry concerns the Big Brother System and Network Monitor (bbd server). It identifies a vulnerability in versions before 1.5c2 where remote attackers could execute arbitrary commands via the shell metacharacter “&”. The impact is remote command execution with the potential for p...

CVE-2000-1034

The CVE relates to a buffer overflow in the Windows 2000 System Monitor ActiveX control (sysmon.ocx). The vulnerability allows remote code execution by crafting a malicious LogFileName value in HTML/scripted content, permitting exploitation by a user who can load the affected page or message. The...

CVE-2000-1034

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...

CVE-2000-1127

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

CVE-2000-0817

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

CVE-2000-1127

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...

CVE-2000-1127

The CVE-2000-1127 entry concerns the registrar component of the HP Resource Monitor service. A local attacker can read and modify arbitrary files by renaming the original registrar.log and creating a symbolic link to a target file; the registrar process then appends log data to that link and sets...

CVE-2000-0817: Undefined Security Weakness

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

CVE-2000-0978: Undefined Security Weakness

bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter...

CVE-2000-1127: Undefined Security Weakness

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...

CVE-2000-0885: Undefined Security Weakness

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

CVE-2000-1034: Undefined Security Weakness

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...

CVE-2000-0885

CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

CVE-2000-0817

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

[SECURITY] New version of tcpdump released

Package: tcpdump Vulnerability: remote exploit Debian-specific: no During internal source code auditing by FreeBSD several buffer overflows were found which allow an attacker to make tcpdump crash by sending carefully crafted packets to a network that is being monitored with tcpdump. This has bee...

BB4 Big Brother Network Monitor 1.5 d2 - 'bb-hist.sh?HISTFILE' File Existence Disclosure

source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway Interface package included with Big...

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account...