CVE-2000-0759

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path...

Xato Advisory: FrontPage DOS Device DoS

----------------------------------------------------------------------- Xato Network Security, Inc. www.xato.net Security Advisory XATO-082000-01 August 17, 2000 FRONTPAGE SERVER EXTENSIONS SHTML.EXE DENIAL OF SERVICE --DOS Device DoS--...

@stake iKey 1000 Security Advisory

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: iKey 1000 Administrator Access and Data Compromise Release Date: July 20, 2000 Application: N/A Platform: Rainbow Technologies' iKey 1000 Severity: An attacker can login as administrator and access all...

Локальная уязвимость iKey

Мастер-ключ хранится в EPROM, может быть извлечен или подменен при наличии физического доступа к устройству...

CVE-2000-0427

CVE-2000-0427 affects the Aladdin Knowledge Systems eToken device. Attackers with physical access can reset the PIN in the device’s EEPROM , allowing access to sensitive information without the owner’s PIN. The provided documents do not specify affected models/firmware versions or any vendor-issu...

CVE-2000-0427

The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM...

Aladdin eToken 3.3.3.x Hardware USB Key Private Data Extraction

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: eToken Private Information Extraction and Physical Attack Release Date: May 4, 2000 Application: N/A Platform: Aladdin eToken USB Key 3.3.3.x Severity: An attacker can access all private information...

Проблемы с eToken

При наличии физического доступа к устройству возможно подменить PIN/ключ доступа путем перепрошивки EPROM...

CVE-2000-0427

The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM...

Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction

source: https://www.securityfocus.com/bid/1170/info Alladin Knowledge Systems eToken is a USB smartcard-like device used for authentication, file integrity, and encryption. Access to the eToken device itself and entering the PIN number encoded in the eToken will grant authorization to a local use...

CVE-1999-0593

Windows NT permits shutdown without authentication due to the Winlogon ShutdownWithoutLogon default setting. Affected: Windows NT; component: Winlogon registry entry ShutdownWithoutLogon. Root cause: default configuration. Impact: local shutdown without login (availability). No exploit details or...

CVE-1999-0593

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in...

CERN httpd Virtual Web Path Disclosure

The remote host appears to be running CERN httpd. It was possible to get the physical location of a virtual web directory by issuing the request : GET /cgi-bin/ls HTTP/1.0 A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc";...

CVE-1999-1452

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting CTRL-V the contents into the username prompt...

CVE-1999-1585

The 1 rcS and 2 mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges...

CVE-1999-1454

Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC Escape key...

CVE-1999-0348

IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory...

CVE-1999-0334

CVE-1999-0334 affects Solaris 2.2–2.3. When fsck fails at startup, a local user with physical access can obtain root privileges (root access). Root cause: startup fsck issue allowing escalation on physical access. Impact: local privilege escalation with full system compromise potential if attacke...

linux_segment_limit_bug.txt

Subject: Linux 2.0.37 segment limit bug To: [email protected] Hello, Linux 2.0.37 released last month introduces the support for more than 1 GB of physical memory on x86 which wasn't supported in earlier 2.0 kernels. It is now possible to increase the limit, at the expense of reducing the...

nt4-ole-clipboard-password.txt

Date: Fri, 29 Jan 1999 10:21:51 -0600 From: "Reed, David" To: [email protected] Subject: ole objects in a "secured" environment? fellow 'noids, background: since all of the major security flaws in windows nt 4.0 have been discovered who am i kidding? ;-, i'd like to point out a min...