Multiple Vulnerabilities in CiscoSecure ACS for Windows NT Server

...

Sambar Server 4.3/4.4 Beta 3 - Search CGI

source: https://www.securityfocus.com/bid/1684/info The Sambar Server was created to test a three-tier communication infrastructure modeled after the Sybase Open Client/Open Server. Soon thereafter, the idea of leveraging the infrastructure for dynamic delivery of content on the WWW resulted in t...

VIGILANTE-2000009.txt

"Invalid URL" DoS Advisory Code: VIGILANTE-2000009 Release Date: September 6, 2000 Systems Affected: - Internet Information Server 4.0 for Windows NT 4.0 - Possibly Windows NT 4.0 in general read Microsoft's note THE PROBLEM A certain series of requests can cause INETINFO.EXE to gradually consume...

@stake Advisory: SiteMinder Access Control Bypass (A0911 00-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: SiteMinder Access Control Bypass A091100-1 Release Date: 09/11/2000 Application: Netegrity SiteMinder 3.6, 4.0 Platform: Solaris 2.x, Windows NT Severity: Access control mechanism can be...

Mobius DocumentDirect for the Internet 1.2 - Remote Buffer Overflow

Mobius DocumentDirect for the Internet 1.2 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1657/info A number of unchecked static buffers exist in Mobius' DocumentDirect for the Internet program. Depending on the data entered, arbitrary code execution or a denial of service...

VIGILANTE-2000009: "Invalid URL" DoS

Microsoft Security Bulletin MS00-063 - -------------------------------------- Patch Available for "Invalid URL" Vulnerability Originally posted: September 05, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information Server IIS...

Security Bulletin (MS00-063)

Microsoft Security Bulletin MS00-063 - -------------------------------------- Patch Available for "Invalid URL" Vulnerability Originally posted: September 05, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information Server IIS...

Проблемы с Novell Client для Windows NT И ScreenSaver.

При использовании Novell Client для Windows NT при блокировки скринсэйвером используется пароль на подключение Novell вместо пароля на вход Windows NT. Это нарушает локальную безопасность в случае использования гостевого входа на сервера Netware...

RobTex Viking Server 1.0.6 Build 355 - Remote Buffer Overflow

RobTex Viking Server 1.0.6 Build 355 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1614/info A number of unchecked buffers exists in Robotex Viking Server. This enables a malicious user to either crash the application or execute arbitrary code, depending on the data...

DST2K0023: Directory Traversal Possible & Denial of Service in Wo rm HTTP Server

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/08/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Remote DoS Attack in Pragma TelnetServer 2000 (Remote Execute Daemon) Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Pragma TelnetServer 2000 Remote Execute Daemon Vulnerability USSR Advisory Code: USSR-2000051 Release Date: August 24, 2000 Systems Affected: Pragma TelnetServer 2000 for Windows NT/2000 THE PROBLEM: The Ussr Labs team has recentl...

MS Exchange Server 5.5: POP3 & IMAP Authentication Problem -> BUG

Hi, I found a little issue with a possible misconfiguration with Exchange Server 5.5 and Windows NT Server 4.0 . If the value LMCompatibilityLevel is added to the registry and set to 5 on a NT server that is running Exchange Server 5.5 running POP3 or IMAP4, a client will no longer be able to...

MS00-052: Relative Shell Path patch (269049)

The hotfix for the 'Relative Shell Path' vulnerability has not been applied. This vulnerability allows a malicious user who can write to the remote system root to cause the code of malicious user's choice to be executed by the users who will interactively log into this host. C Tenable Network...

Security Bulletin (MS00-052)

Microsoft Security Bulletin MS00-052 - -------------------------------------- Patch Available for "Relative Shell Path" Vulnerability Originally posted: July 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0 and Windowsr...

Уязвимость в NT - относительнный путь к оболочке пользователя.

По-умлочанию explorer.exe ищется в корневой директории системного раздела, что позволяет подменить его и таким образом запустить приложение с правами другого пользователя...

Alert: Buffer Overrun is O'Reilly WebsitePro webfind.exe (CISADV000718)

Cerberus Information Security Advisory CISADV000718 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 18th July 2000 Name : Website Pro webfind.exe buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : Robert...

Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe (CISADV000717)

Cerberus Information Security Advisory CISADV000717 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 17th July 2000 Name : Website Pro GET buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : David Litchfie...

DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k.

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with th...

Infosec.20000712.worldclient.2.1

Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 =============================== Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases...

FS-071000-5-JWS

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Sun's Java Web Server ---------------------------------------------------------------------- FS Advisory ID: FS-071000-5-JWS Release Date: July 10, 2000 Product: Java Web Server Vendor: Sun Microsystems...