CVE-2001-0002: Undefined Security Weakness

Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help .chm files to execute arbitrary programs...

BubbleMon 1.31

VULNERABILITY DESCRIPTION Users can execute programs/shellscript by clicking on the bubblemon app. bubblemon is installed sgid kmem on FreeBSD and does not drop its egid before executing programs. VERSIONS AFFECTED All versions of BubbleMon up to 1.32 installed on FreeBSD . EXAMPLE $ id...

[SECURITY] [DSA 036-1] New version of Midnight Commander available

---------------------------------------------------------------------------- Debian Security Advisory DSA-036-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : mc...

CVE-2001-0030

FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them...

guninski31.txt

Georgi Guninski security advisory 31, 2001 Windows Media Player 7 and IE vulnerability - executing arbitrary programs Systems affected: Windows Media Player 7 and IE Risk: High Date: 1 January 2001 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may distribute it unmo dified...

Windows Media Player 7 and IE vulnerability - executing arbitrary programs

Georgi Guninski security advisory 31, 2001 Windows Media Player 7 and IE vulnerability - executing arbitrary programs Systems affected: Windows Media Player 7 and IE Risk: High Date: 1 January 2001 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may distribute it unmodified...

Microsoft Windows Media Player 7.0 - JavaScript URL

Microsoft Windows Media Player 7.0 - JavaScript URL source: https://www.securityfocus.com/bid/2167/info Windows Media Player is an application used for digital audio, and video content viewing. It can be embedded in webpages as an ActiveX control. It is possible to execute a javascript URL from...

OBJECT TYPE="text/html" may allow executing arbitrary programs in IE 5.5

Georgi Guninski security advisory 29, 2000 OBJECT TYPE="text/html" may allow executing arbitrary programs in IE 5.5 Systems affected: IE 5.5 probably 5.x and Outlook/Outlook Express, have not tested Risk: High Date: 23 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski...

Redhat 6.2 dump command executes external program with suid priviledge.

Problem: Linux dump command executes external program with suid priviledge. 2. Tested Version dump-0.4b15 3. Example mat@localhost mat$ export TAPE=garbage:garbage mat@localhost mat$ export RSH=/home/mat/executethis mat@localhost mat$ cat /home/mat/executethis !/bin/sh cp /bin/sh /home/mat/sh...

IE 5.5/Outlook security vulnerability - com.ms.activeX.ActiveXComponent allows executing arbitrary programs

Georgi Guninski security advisory 23, 2000 IE 5.5/Outlook security vulnerability - com.ms.activeX.ActiveXComponent allows executing arbitrary programs Systems affected: IE 5.5/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 5 October 2000 Legal Notice: This...

guninski23.txt

----- Forwarded message from Georgi Guninski ----- Approved-By: [email protected] Delivered-To: [email protected] Delivered-To: [email protected] X-Mailer: Mozilla 4.75 en Win98; U X-Accept-Language: en Date: Thu, 5 Oct 2000 15:19:28 +0300 Reply-To: Georgi Guninski...

Microsoft Virtual Machine 2000310032003300 Series - com.ms.activeX.ActiveXComponent Arbitrary Program Execution

Microsoft Virtual Machine 2000310032003300 Series - com.ms.activeX.ActiveXComponent Arbitrary Program Execution source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute...

Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution

source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsoft Internet Explorer or Outlook. Th...

Notes default ECL allows execution of unsigned code

Overview Lotus Notes prior to version 5.02, had permissive ECLs that allow for the execution of malicious mail messages. Description A Notes ECL is a list consisting of a Notes Username and a set of permissions from the following list for Notes 4.6.x: Access to file system Access to current...

Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases

Georgi Guninski security advisory 21, 2000 Double clicking on MS Office dpocuments from Windows Explorer may execute arbitrary programs in some cases Systems affected: MS Office 2000, Win98/Win2000 probably other applications Risk: Medium Date: 18 September 2000 Legal Notice: This Advisory is...

MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

ie5-access2000.txt

Georgi Guninski security advisory 14, 2000 IE 5 and Access 2000 vulnerability - executing programs Systems affected: IE 5.01, Access 2000, Win98 - probably other versions, have not tested Risk: High Disclaimer: The opinions expressed in this advisory and program are my own and not of any company...

IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs

Georgi Guninski security advisory 13, 2000 IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs Systems affected: IE 5.01, Excel 2000, PowerPoint 2000, Win98 - probably other versions, have not tested Risk: High Disclaimer: The opinions expressed in this advisory and program ar...

IE 5 and Access 2000 vulnerability - executing programs

Georgi Guninski security advisory 14, 2000 IE 5 and Access 2000 vulnerability - executing programs Systems affected: IE 5.01, Access 2000, Win98 - probably other versions, have not tested Risk: High Disclaimer: The opinions expressed in this advisory and program are my own and not of any company...

IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs

Georgi Guninski security advisory 14, 2000 IE 5 and Access 2000 vulnerability - executing programs Systems affected: IE 5.01, Access 2000, Win98 - probably other versions, have not tested Risk: High Disclaimer: The opinions expressed in this advisory and program are my own and not of any company...