CVE-2002-0604

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

Security holes in OpenBB

Product : OpenBB http://www.prolixmedia.com Versions : 1.0.0 RC3 and less ? Problems : - XSS - Access to moderators' options Exploits : - /myhome.php?action=messages&box=form20name=ainput 20name=i20value=XSS/formscriptalert document.a.i.value/script - imghttp://" onerror="SCRIPT"/img - glow...

FreeBSD 4.x - Process Concealment Bypass

source: https://www.securityfocus.com/bid/4768/info In FreeBSD, setting kern.psshowallprocs=0 via the sysctl call is meant to disable normal users from seeing any running processes that are not owned by them. The current implementation of this feature fails to protest system process information. ...

CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message...

CVE-2002-0240

CVE-2002-0240 affects PHP when deployed with Apache and configured to serve index.php by default. The vulnerability allows remote attackers to learn the server’s full pathname via the HTTP OPTIONS method, leaking a partial confidentiality breach (PARTIAL) without impact to integrity/availability,...

KPMG-2002017: Snapgear Lite+ Firewall Denial of Service

-------------------------------------------------------------------- Title: Snapgear Lite+ Firewall Denial of Service BUG-ID: 2002017 Released: 02nd May 2002 -------------------------------------------------------------------- Problem: ======== Several issues with the Snapgear Lite+ Firewall coul...

CVE-2000-0839

Technical details about CVE-2000-0839 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, impact, and fixes.

CVE-2001-0554

CVE-2001-0554 affects netkit-telnetd (Telnet daemon) on BSD-based systems, via a buffer overflow in in.telnetd/telrcv handling (triggered by certain Telnet options such as AYT). OpenVAS entries describe a remote attacker potentially causing denial of service or gaining remote code execution; at l...

KTH Kerberos Telnet implementations do not strictly enforce client encryption request

Overview A vulnerability exists in the KTH Kerberos IV and Kerberos V Heimdal Telnet implementations. When a KTH Kerberos Telnet client requests data encryption and the server does not appear to support it, the client will establish the connection using no encryption. A properly located attacker...

Kerberos Telnet protocol does not adequately protect authentication and encryption options

Overview A vulnerability exists in the Telnet Authentication Option and Telnet Data Encryption Option specifications. An ordered list of authentication and encryption options sent from the server to client during negotiation is not cryptographically protected. As a result, an attacker may be able...

efax

Didn't see this mentioned before... hdm@sliver: which efax /opt/kde2/bin/efax hdm@sliver: ls -la /opt/kde2/bin/efax -rwsr-xr-x 1 root root 96689 Aug 16 10:23 /opt/kde2/bin/efax hdm@sliver: efax -h efax: Tue Jan 15 18:43:28 2002 efax v 0.9a-001114 Copyright 1999 Ed Casas efax: Tue Jan 15 18:43:28...

CDE dtprintinfo contains local buffer overflow in Help window via clipboard copy

Overview The CDE Print Viewer program dtprintinfo provides a graphical interface display the status of print queues and print jobs. By using the clipboard to overflow the search field in the Help window of dtprintinfo, a local attacker can execute arbitrary code on the system as root. Description...

IBM WebSphere on UNIX security alert !

====================================================================== IBM Websphere reveals system root password. Author : Heikki Tunkelo [email protected] Date : 13.12.2001 ====================================================================== === Brief description === It is possible...

CVE-2001-0714

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service data loss by 1 setting a high initial message hop count option -h, which causes Sendmail to drop queue entries, 2 via the -qR option, or 3 via the -qS option...

lpd allows options to be passed to sendmail

Overview The line printer daemon enables various clients to share printers over a network. There exists a vulnerability in this daemon that permits an intruder to send options to sendmail. Description The line printer daemon enables various clients to share printers over a network. There exists a...

Microsoft Windows Index Server discloses sensitive configuration information via crafted request to SQLQHit.asp sample application

Overview Microsoft Windows Index Server ships with an optional sample package. A component of this package, SQLQHit.asp, can disclose sensitive information when sent crafted requests. Description The Microsoft Windows Index Server ships with optional sample files. While these files should never b...

RTSP Server Type / Version Detection

The remote server is an RTSP server. RTSP is a client-server multimedia presentation protocol, which is used to stream videos and audio files over an IP network. It is usually possible to obtain the list of capabilities and the server name of the remote RTSP server by sending an OPTIONS request. ...

Arkeia Possible remote root & information leakage

Arkeia 4.2 - other versions not tested Possible remote root & information leakage Sumary Arkeia www.arkeia.com is from their webpage: "Arkeia simplifies data protection by providing automated backup and recovery.The system supports a wide variety of computers, operating systems and storage device...

Solaris 2.x/7.0/8 / IRIX 6.5.x / OpenBSD 2.x / NetBSD 1.x / Debian 3 / HP-UX 10 - 'TelnetD' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/3064/info A boundary condition error exists in telnet daemons derived from the BSD telnet daemon. Under certain circumstances, the buffer overflow can occur when a combination of telnet protocol options are received by the daemon. The function...