CVE-2000-1127

The CVE-2000-1127 entry concerns the registrar component of the HP Resource Monitor service. A local attacker can read and modify arbitrary files by renaming the original registrar.log and creating a symbolic link to a target file; the registrar process then appends log data to that link and sets...

CVE-2000-1127

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...

CVE-2000-0817

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

CVE-2000-0885

CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

[SECURITY] New version of tcpdump released

Package: tcpdump Vulnerability: remote exploit Debian-specific: no During internal source code auditing by FreeBSD several buffer overflows were found which allow an attacker to make tcpdump crash by sending carefully crafted packets to a network that is being monitored with tcpdump. This has bee...

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account...

BB4 Big Brother Network Monitor 1.5 d2 - 'bb-hist.sh?HISTFILE' File Existence Disclosure

source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway Interface package included with Big...

HP-UX 10.20 resource monitor service

Problem: on HP-UX 10.20 you can change any file on the root partition to mode 644: $ uname -sr HP-UX B.10.20 $ cd /etc/opt/resmon/log $ mv registrar.log registrar.log.orig $ ls -l /.shhistory -rw------- 1 root sys 3316 Sep 20 15:22 /.shhistory $ ln /.shhistory registrar.log $ nc hpux.example.com...

Дырка в HP-UX 10.20 resource monitor (symlink)

Проблема символьных линков позволяет прочитать любой файл...

System Monitor ActiveX Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 System Monitor ActiveX Buffer Overflow Vulnerability USSR Advisory Code: USSR-2000057 Public Disclosure Date: November 3, 2000 Vendors Affected: Microsoft Corporation http://www.microsoft.com Systems Affected: Microsoft Windows 2000 Server Microsoft...

Дырки в Network Monitor Windows NT/2000

Переполнение буфера в фильтре разбирающем HTTP...

[COVERT-2000-11] Multiple Network Monitor Overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory November 1, 2000 Multiple Network Monitor Overflows COVERT-2000-11 o Synopsis Multiple buffer overflows in the Windows NT Network Monitor allow a remote attacker to execute arbitrary code or deny...

Security Bulletin (MS00-083)

Microsoft Security Bulletin MS00-083 - -------------------------------------- Patch Available for "Netmon Protocol Parsing" Vulnerability Originally posted: November 01, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr and...

ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in Microsoft Windows NT 4.0 and Windows 2000 Network Monitor

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

CVE-2000-0450

Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands...

CVE-2000-0450

Technical details (affected product, version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

SessionWall-3 Paper + (links to) code

Dear All, The example code which compliments this paper can be found on http://www.phate.net/progs/sw3 Best regards, and enjoy. -cdx -- Design and Implementation Flaws in SessionWall-3 or "Using and Abusing SessionWall-3 with the power of XOR" by Ob1 [email protected] Maelstrom [email protected] Codex...

Дырка в Secret Disk

На машинах с несколькими мониторами скринсейвер с паролем, запускающийся при изъятии ключа, запускается только на одном мониторе...

Aladdin Software Security SecretDisk console blocking failure

Good $daytime, SecretDisk, made by Aladdin Software Security R.D., http://www.aladdin.ru/ provides cryptographic file system for Win9x boxes. It supports usage of parallel port keys, smartcards, PCMCIA cards, or recently mentioned USB eTokens, in combination with password protection. Among others...