Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (8)

source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Apple Personal Web Sharing 1.11.51.5.5 - Remote Denial of Service

Apple Personal Web Sharing 1.11.51.5.5 - Remote Denial of Service source: https://www.securityfocus.com/bid/2715/info Apple Personal Web Sharing is a utility that allows users to extend file-sharing abilities across a small intranet. It is shipped with MacOS 9. A user may craft a URL which contai...

Apple Personal Web Sharing 1.1/1.5/1.5.5 - Remote Denial of Service

source: https://www.securityfocus.com/bid/2715/info Apple Personal Web Sharing is a utility that allows users to extend file-sharing abilities across a small intranet. It is shipped with MacOS 9. A user may craft a URL which contains excess characters to cause the file-sharing system to shut down...

Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

swc / ActivCard

-- Standard disclaimer: this material contains my personal oppinions and beliefs ONLY. It has nothing to do with my employer / company. I am writing it as a private person. It doesn't have to be upright, nor doesn't even pretend to provide objective / useful information. All statements should be...

Linux news 3.07.00

WU-FTPD 2.6.1 Вышла новая версия популярного FTP сервера WU-FTPD - WU-FTPD 2.6.1. В данной версии появилась поддержка virtual passwd/virtual shadow как в BeroFTPD. Кроме того пофиксен серьезный security баг, благодаря которому пользователь мог получить права root-а. Также пофиксен баг с возможной...

ACROS-2000-04-06-1-PUB

=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-04-06-1-PUB ------------------------------------------------------------------------- Bypassing Warnings For Invalid SSL Certificates In Netscape Navigator...

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67

source: https://www.securityfocus.com/bid/1137/info Certain versions of Zone Labs personal Firewall have a vulnerability which allows malicious users to port scan the firewall without being detected. In particular if the port scan originates from source port 67 on the attacking host the ZoneAlarm...

RFP2K03: Contemplations on dvwssr.dll and its affects on life

---------------- RFP2K03 -------------------------- rfp.labs ------------- Contemplations on dvwssr.dll and how it affects life RFP2K02 Addendum: further information ------------------------------------- rain forest puppy / [email protected] This advisory does contain new, technical information...

RFP2K03.txt

---------------- RFP2K03 -------------------------- rfp.labs ------------- Contemplations on dvwssr.dll and how it affects life RFP2K02 Addendum: further information ------------------------------------- rain forest puppy / [email protected] This advisory does contain new, technical information...

CVE-2000-0153

FrontPage Personal Web Server PWS allows remote attackers to read files via a .... dot dot attack...

CVE-2000-0153: Undefined Security Weakness

FrontPage Personal Web Server PWS allows remote attackers to read files via a .... dot dot attack...

frontpage.doubledot.txt

Description: Doubledot bug in FrontPage FrontPage Personal Web Server. Compromise: Accessing drive trough browser. Vulnerable Systems: Frontpage-PWS32/3.0.2.926 other versions not tested. Details: When FrontPage-PWS runs a site on your c:\ drive your drive could be = accessed by any user accessin...

CVE-1999-0474

CVE-1999-0474 concerns the ICQ Webserver, where remote attackers can exploit a path traversal issue (using ..) to access files outside the user’s personal directory. Public sources corroborate an access-control/authorization bypass leading to potential partial confidentiality impact (CVSS v2 base...

CVE-1999-0386

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL...

CVE-1999-0386

CVE-1999-0386 affects Microsoft Personal Web Server and FrontPage Personal Web Server on Windows. Connected sources confirm a remote attacker can read server files via a nonstandard URL, with additional evidence describing a traversal-like vector using multiple dot characters (e.g., dot-dot-dot s...

CVE-1999-0386: Undefined Security Weakness

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL...

msie.5.autocomplete.txt

http://abcnews.go.com/sections/tech/DailyNews/iehole990315.html New Web Browser Feature May Put Private Info At Risk Internet Explorer 5.0 users might be vulnerable to hackers if they enter credit cards and other information using the browser's AutoComplete feature. A.Shepherd/ABCNEWS.com By...

ms-personal-webserver-path.txt

Personal web server kiborg [email protected] Wed, 17 Jan 1996 22:30:13 +0200 Hello, Sorry if this has already been known. But i didn't find something of the sort. While playing with Microsoft Personal Web Server Frontpage-PWS32/3.0.2.926. I found that the following URL will list the root directo...

ms.personal.webserver.txt

Date: Sat, 27 Mar 1999 11:29:56 -0800 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-010 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...