CVE-2002-0349: Undefined Security Weakness

Tiny Personal Firewall TPF 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions...

CVE-2002-0264: Undefined Security Weakness

PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges...

AIM Remote File Transfer/Direct Connection Vulnerability

AIM Remote File Transfer/Direct Connection Vulnerability I Discovered this vulnerability while I was port scanning my brotherApril 15th, 2002, he just happened to send me a file and the port scan connected and received the file instead of me... The next dayApril 16th, 2002 I made a program to...

Protection bypass in Norton Personal Firewall

Few widespreaded attacks are not detected...

Norton Personal Firewall 2002 vulnerable to SYN/FIN scan

Hi all, I looked briefly in bugtraq archives and I didn't find any reference to this issue. Please accept my apologies, if it's a known problem. Norton Personal Firewall 2002 on Windows 2000 is vulnerable to SYN/FIN scan SYN/FIN/URG, SYN/FIN/PUSH, SYN/FIN/URG/PUSH are not detected as well also if...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta is affected by CVE-2001-1140, where remote attackers can read source code of executables by adding a null byte (%00) to the request. The vulnerability is exploitable over a network with low attack complexity and no authentication, causing partial confidentialit...

CVE-2001-1140

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 null byte to the request...

CVE-2001-1140: Undefined Security Weakness

BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 null byte to the request...

CVE-2001-1016

The CVE-2001-1016 entry affects PGP Corporate Desktop < 7.1 , Personal Security < 7.0.3 , Freeware < 7.0.3 , and E-Business Server

CVE-2001-1016: Undefined Security Weakness

PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trust...

Security Bulletin MS02-009

---------------------------------------------------------------------- Title: Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files Date: 21 February 2002 Software: Internet Explorer Impact: Information Disclosure Max Risk: Critical Bulletin: MS02-009 Microsoft encourages...

Account theft vulnerability in MakeBid Auction Deluxe 3.30

Date : February 9, 2002 Product : MakeBid Auction Deluxe Version 3.30 Vendor : USANet Creations URL : http://www.netcreations.addr.com/auctiondeluxe.html Vulnerability : Cross site scripting vulnerability Insecure Cookie Usage Risk : High Summary : MakeBid Auction Deluxe is a commercial PERL CGI...

CVE-2001-1575

Apple Personal Web Sharing PWS 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow...

CVE-2001-1549

Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...

Mozilla personal security manager /tmp issues

Playing with /tmp a bit this morning I ran into the following issue in mozilla... with mozilla open root@linuxppc root fuser -n file /tmp/.nsmc-0-lock /tmp/.nsmc-0-lock: 3220 3223 3224 3226 3227 3228 3229 root@linuxppc root ps -ef | grep 3220 root 3220 1 0 12:42 ? 00:00:00 ./psm sh-2.05$ id...

Символьные линки personal security manager в Mozilla (symbolic links)

Проблема символьных линков при создании временного каталога...

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass

ZoneAlarm Pro 1.02.x - Outbound Packet Bypass source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

CVE-2001-0649

Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request...

CVE-2001-0649

CVE-2001-0649 affects Personal Web Sharing 1.5.5. The vulnerability is a denial-of-service caused by processing a too-long HTTP request, which can crash the PWS service. Public details in the provided documents consistently describe a remote DoS vector via oversized requests, with no evidence of ...