1775 matches found
Symantec Sygate Management Server: SMS Authentication Servlet SQL Injection
SUMMARY A SQL injection vulnerability in Symantec's Sygate Management Server SMS version 4.1, build 1417 and earlier could potentially allow a remote or local attacker to gain administrative privileges to the SMS server. Risk Impact High Remote Access | Yes ---|--- Local Access | Yes Authenticati...
Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
Dear security community and Oracle users, Many of my customers run Oracle. Much of the U.K. Critical National Infrastructure relies on Oracle; indeed this is true for many other countries as well. I know that there's a lot of private information about me stored in Oracle databases out there. I ha...
Policy - iroffer Software Detection
Binary data 1183.prm...
RHEL 2.1 : gdm (RHSA-2003:259)
Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...
minimalist code execution
No description provided...
Assorted Trend Vulns Rev 2.0
Trend Micro Assorted Vulnerabilities Rev 2.0 01/14/03 Information I have had these sitting around for about a year and just said "fawk it" and am giving 'em to the community to sort through before they start growing edible fungi. Not even sure if they work on newer versions of Trend software, too...
Microsoft Windows - Users Information : Passwords Never Expire
Using the supplied credentials, Nessus was able to list users that are enabled and whose passwords never expire. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10900; scriptversion"1.22"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows ...
rsync <= 2.5.1 Remote Exploit (2)
No description provided by source. / 7350rsync - rsync include include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE...
insecure signal handler design
"Delivering Signals for Fun and Profit" Understanding, exploiting and preventing signal-handling related vulnerabilities. Michal Zalewski [email protected] C Copyright 2001 BindView Corporation 0 Introduction --------------- According to a popular belief, writing signal handlers has litt...
Catastrophic failure of Strip password generation.
Executive summary: If you have ever used Strip for the Palm to generate your passwords, change them. Change them NOW. Strip Secure Tool for Recalling Important Passwords is a nice encrypted password notebook for the Palm; see http://www.zetetic.net/products.html for details. Strip-0.5 also featur...
ciac-J-042.web.security.txt
Date: Tue, 18 May 1999 09:09:34 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-042: Web Security For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ | / \ \ INFORMATION...
Cisco IOS DFS Access List Leakage
...
MS:73EE6115-882D-466F-8223-773102E018F3
...