973 matches found
CVS DoS
Hi, I've just found annoying bug in cvs-1.10.7 probably others too. Let's assume you've decided to make your remote cvs repository available to several trusted people. Therefore you need to edit your /etc/inetd.conf file and add line similar to presented below: cvspserver stream tcp nowait root...
CVE-2000-0025
The CVE-2000-0025 entry concerns IIS 4.0 and Site Server 3.0, where remote attackers can read ASP source code if the target file resides in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll (the so‑called Virtual Directory Naming vulnerability). The affecte...
CVE-2000-0025: Undefined Security Weakness
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability...
Apple Mac OSX 10 HP-UX 91011 Mandriva 67 RedHat 56 SCO 5 IRIX 6 - Shell Redirection Race Condition
Apple Mac OSX 10 HP-UX 91011 Mandriva 67 RedHat 56 SCO 5 IRIX 6 - Shell Redirection Race Condition source: https://www.securityfocus.com/bid/2006/info bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability...
Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition
source: https://www.securityfocus.com/bid/2006/info bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability exists in these shells that could allow an attacker to arbitrarily write to files. A vulnerability has...
windows.prn.flaw.txt
Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...
bash.parse.txt
Date: Tue, 20 Apr 1999 21:25:47 -0400 From: Shadow To: [email protected] Subject: Bash Bug Figured while everyone was working with bash, I might as well make this one publicI apologize if this is old news, apparently it hasnt been fixed if so. If a user creates a directory with a command like...
PT-1999-1085 · Mirc · Mirc
Name of the Vulnerable Software and Affected Versions: Mirc version 5.5 Description: The issue concerns a problem with the DCC server command in the Mirc client, where it fails to properly filter characters from file names. This allows remote attackers to potentially place a malicious file in a...
ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink
ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink source: https://www.securityfocus.com/bid/80/info The named daemon will dump the named database to /var/tmp/nameddump.db when it receives a SIGINT signal. It does not check for symbolic links while doing so and can be made to overwrite any file in...
Microsoft Dynamics CRM 2013 Service Pack 1 and CRM Online Spring '14
None None...
Security Update for Windows 2000 (KB830352)
A security issue has been identified that could allow an attacker to compromise a computer running Microsoft Windows Internet Naming Service WINS and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...
Security Update for Windows Server 2003 (KB830352)
A security issue has been identified that could allow an attacker to compromise a computer running Microsoft Windows Internet Naming Service WINS and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...