895 matches found
SnortCenter 0.9.5 temp file naming problems...
Hello. I am releasing this very late, as SnortCenter v0.9.6 has been released for a few weeks now. This bug was discovered a couple of months ago, but not released at the request of Stefan Dens, the author of SnortCenter. SnortCenter is a php based tool for aggregating many snort sensors into one...
Deerfield Website Pro source disclosure
It's possible to obtain scripts sources with 8.3 names...
CVE-2001-1582
Buffer overflow in the LDAP naming services library libsldap in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAPOPTIONS environment variable to a privileged program that uses libsldap...
CVS DoS
Hi, I've just found annoying bug in cvs-1.10.7 probably others too. Let's assume you've decided to make your remote cvs repository available to several trusted people. Therefore you need to edit your /etc/inetd.conf file and add line similar to presented below: cvspserver stream tcp nowait root...
CVE-2000-0025
The CVE-2000-0025 entry concerns IIS 4.0 and Site Server 3.0, where remote attackers can read ASP source code if the target file resides in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll (the so‑called Virtual Directory Naming vulnerability). The affecte...
Apple Mac OSX 10 HP-UX 91011 Mandriva 67 RedHat 56 SCO 5 IRIX 6 - Shell Redirection Race Condition
Apple Mac OSX 10 HP-UX 91011 Mandriva 67 RedHat 56 SCO 5 IRIX 6 - Shell Redirection Race Condition source: https://www.securityfocus.com/bid/2006/info bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability...
Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition
source: https://www.securityfocus.com/bid/2006/info bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability exists in these shells that could allow an attacker to arbitrarily write to files. A vulnerability has...
windows.prn.flaw.txt
Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...
bash.parse.txt
Date: Tue, 20 Apr 1999 21:25:47 -0400 From: Shadow To: [email protected] Subject: Bash Bug Figured while everyone was working with bash, I might as well make this one publicI apologize if this is old news, apparently it hasnt been fixed if so. If a user creates a directory with a command like...
PT-1999-1085 · Mirc · Mirc
Name of the Vulnerable Software and Affected Versions: Mirc version 5.5 Description: The issue concerns a problem with the DCC server command in the Mirc client, where it fails to properly filter characters from file names. This allows remote attackers to potentially place a malicious file in a...
ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink
ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink source: https://www.securityfocus.com/bid/80/info The named daemon will dump the named database to /var/tmp/nameddump.db when it receives a SIGINT signal. It does not check for symbolic links while doing so and can be made to overwrite any file in...
Microsoft Dynamics CRM 2013 Service Pack 1 and CRM Online Spring '14
None None...
Security Update for Windows Server 2003 (KB830352)
A security issue has been identified that could allow an attacker to compromise a computer running Microsoft Windows Internet Naming Service WINS and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...
Security Update for Windows 2000 (KB830352)
A security issue has been identified that could allow an attacker to compromise a computer running Microsoft Windows Internet Naming Service WINS and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...