Mozilla personal security manager /tmp issues

Playing with /tmp a bit this morning I ran into the following issue in mozilla... with mozilla open root@linuxppc root fuser -n file /tmp/.nsmc-0-lock /tmp/.nsmc-0-lock: 3220 3223 3224 3226 3227 3228 3229 root@linuxppc root ps -ef | grep 3220 root 3220 1 0 12:42 ? 00:00:00 ./psm sh-2.05$ id...

Символьные линки personal security manager в Mozilla (symbolic links)

Проблема символьных линков при создании временного каталога...

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

CVE-2001-0649

Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request...

CVE-2001-0649

CVE-2001-0649 affects Personal Web Sharing 1.5.5. The vulnerability is a denial-of-service caused by processing a too-long HTTP request, which can crash the PWS service. Public details in the provided documents consistently describe a remote DoS vector via oversized requests, with no evidence of ...

CVE-2001-0649

Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 null byte to the request...

SnapStream Personal Video Station 1.2 a - PVS Directory Traversal

source: https://www.securityfocus.com/bid/3100/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129...

SnapStream Personal Video Station 1.2 a - PVS Directory Traversal

SnapStream Personal Video Station 1.2 a - PVS Directory Traversal source: https://www.securityfocus.com/bid/3100/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP...

MacOS Personal Wed Sharing DoS

Hello bugtraq readers and Apple Inc. The problem this time is that when File Sharing is set to check PWS logins, on a about 300char password the system freezes. This problem could be bigger, cause Macintosh File sharing passwords cannot be longer than 8 chars and many apps support File Sharing to...

Переполнение буфера в MacOS Personal Wed Sharing (buffer overflow)

Переполнение буфера при длинном пароле...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (2)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 2 // source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (1)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 1 // source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request...

DoS против Personal Web Sharing в Macintosh (buffer overflow)

Переполнение буфера при длинном URL...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (5)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 5 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (3)

source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (4)

// source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (6)

source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (6)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 6 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...