Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

CVE-2000-0505

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters...

Security Advisory: Bytes Interactive's Web Shopper (shopper.cgi) Directory Traversal Vulnerability

October 8, 2000 Security Advisory: Bytes Interactive's Web Shopper shopper.cgi Directory Traversal Vulnerability Affected Product/Versions: Bytes Interactive's Web Shopper shopper.cgi Version 1.0 Bytes Interactive's Web Shopper shopper.cgi Version 2.0 Affected Platforms: Unix Windows Overview: Th...

boa.server.txt

ID: S21SEC-005-en Title: Vulnerability in BOA web server v0.94.8.2 Date: 03/10/2000 Status: Vendor contacted, patch available Scope: Arbitrary file access Platforms: Unix Author: llmora Location: http://www.s21sec.com/en/avisos/s21sec-005-en.txt Release: Public S 2 1 S E C http://www.s21sec.com...

Shambala 4.5 vulnerability

Subject: DoS in Shambala Server 4.5 Platforms: Microsoft Windows 9x, WIndows NT and Windows 2000 Risk Level High Author: zillion Vendor: Evolvable Corporation Vendor status: Notified 4 weeks ago. The problem will be fixed in a next release Subject: ========= Shambala Server 4.5 denial of service...

[SECURITY] Security policy for Debian 2.1 (slink) (updated)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 21, 2000 - ------------------------------------------------------------------------ Debian is phasing out support for...

ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in IBM Net.Data db2www CGI program

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

Security Advisory: Netscape Administration Server Password Disclosure. ( netscape.ad-1.00-07 )

July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...

netscape.ad.00-07

July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...

Veritas Software Volume Manager 3.0.23.0.33.0.4 - File Permission

Veritas Software Volume Manager 3.0.23.0.33.0.4 - File Permission source: https://www.securityfocus.com/bid/1356/info A vulnerability exists in the Volume Manager product, versions 3.0.x, from Veritas Software. Volume Manager is a popular disk management package. Volume Manager running on Solaris...

Veritas Software Volume Manager 3.0.2/3.0.3/3.0.4 - File Permission

source: https://www.securityfocus.com/bid/1356/info A vulnerability exists in the Volume Manager product, versions 3.0.x, from Veritas Software. Volume Manager is a popular disk management package. Volume Manager running on Solaris platforms prior to Solaris 8 are vulnerable. Upon startup, the...

CVE-2000-0505

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters...

Microsoft Office 2000 Advisory

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: Microsoft Office 2000 UA Control Scripting Release Date: 5-12-2000 Application: Microsoft Office 2000 Platform: Windows 95/98, NT 4.0 and 2000 Severity: Malicious active content can execute regardless o...

netscape-wp.dir-list

---------------- ZSH Advisory Netscape WebPublisher Allows Directory Listing and Access March 11, 2000 AD000311-1 ---------------- Brief Description : Netscape Webpublisher is an addon to Netscape's Enterprise webserver which allows remote filemodifications, uploads and downloads. A third party...

The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion

The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the...

The Bat! X-BAT-FILES

"The Bat!" by RitLabs is extremely convenient mail agent with a lot of features for Windows platforms. One of "The Bat!" features is storing files attached to e-mail messages apart from messages bodies. In this case "The Bat!" puts attached files in preconfigured folder and removes according MIME...

McAfee 4.0 Network Associates for Windows NT 4.0.24.0.3 a Norton AntiVirus 2000 - Recycle Bin Exclusion

McAfee 4.0 Network Associates for Windows NT 4.0.24.0.3 a Norton AntiVirus 2000 - Recycle Bin Exclusion McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source:...

norton.2000.txt

This was going to be w00giving 11 w00giving 10 will be posted within the next few days. Anyway, this allows EIP to be overwritten with 265+ bytes, which person who posted this vulnerability failed to mention or failed to notice. It's unclear if he labeled it as a DoS because he didn't realize it...

Novell Client 3.0/3.0.1 - Denial of Service

source: https://www.securityfocus.com/bid/700/info Novell client versions 3.0 and 3.01 for Windows platforms are vulnerable to a remotely exploitable vulnerability which could cause a denial of service. The client opens a listening tcp socket on port 427, to which if a SYN is sent, results in the...

nmap.txt

Subject: Re: CERT Summary CS-99-03 To: [email protected] From the CERT Summary released yesterday: 1. RPC Vulnerabilities We have received many reports of exploitations involving three RPC vulnerabilties. Such exploitations can lead to root compromise on systems that implement these RPC...