Немец выпустил «самую уязвимую ОС» на базе Linux

Торстен Шнайдер, преподаватель с факультета технологий Университета Билефельда, что находится в Германии, выпустил Damn Vulnerable Linux — специальный дистрибутив, который вобрал «все, чего не должно быть в хорошей Linux-системе». В составе Damn Vulnerable Linux — «ориентированное на взлом»...

Vulnerable DLLs distributed with Terratec HomeCinema 6.3

Once again a sad story of poor software "engineering", missing QA and a TOTALLY unresponsive vendor. The current version 6.3 of Terratec's TV software HomeCinema http://ftp.terratec.de/Receiver/TerraTecHomeCinema/TerraTecHomeCinema6.3.exe from 2009-05-05 installs outdated and vulnerable .DLLs the...

DoS in Plug and Play Web Server Proxy Server

DoS in Plug and Play Web Server Proxy Server ============================== Plug & Play server is a HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY server, running on Windows platforms. Version: 1.0002c -------- Vendor: www.pandpsoft.com ------- Vulnerability: -------------- Sending the following...

SRT Security Advisory (SRT2002-04-31-1159): Mnews

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-04-31-1159 Topic : Mnews local and remote overflow vulnerabilities Date : May 31, 2002 Credit : zillionatsafemode.org Site : http://www.snosoft.com...

CVE-1999-1074

Webmin before 0.5 is affected: it does not restrict the number of invalid password attempts for a valid username, enabling remote attackers to attempt brute‑force password cracking and potentially gain privileges. The issue is described across CVE-1999-1074 records (CVE/NVD/CVELIST) and corrobora...

Многочисленные дырки в дистрибутиве SCO 5.0.6

В дистрибутив вошли старые версии различных продуктов имеющие удаленны и локальные уязвимости...

access.counter-4.0.7.txt

The popular CGI web page access counter version 4.0.7 by George Burgyan allows execution of arbitrary commands due to unchecked user input. Commands are executed with the same privilege as the web server. Of course, other exploits can be used to get root access on an unpatched OS. The counter...

CVE-1999-0662: Undefined Security Weakness

A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete...

CVE-1999-0662

A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete...

PT-1999-1251 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned. Description: A system-critical program or library is missing the appropriate patch, hotfix, or service pack, or is outdated or obsolete. Recommendations: At the moment, there is no...

Authentication bypass via attacker provided openid server

Impact The outdated version 1 of the Steam Socialite Provider doesn't check properly if the login comes from steamcommunity.com, allowing a malicious actor to substitute their own openID server. Patches This vulnerability only affects the outdated v1.x versions of the package. These are no longer...