Security Advisory FreeBSD-SA-01:28.timed

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:28 Security Advisory FreeBSD, Inc. Topic: timed allows remote denial of service Category: core Module: timed Announced: 2001-03-12 Credits: Discovered during internal...

Basilix Webmail 0.9.7 - Incorrect File Permissions

source: https://www.securityfocus.com/bid/2198/info A vulnerability has been reported in basilix webmail v. 0.9.7b. Basilix Webmail ships with several configuration files that have the file extensions '.class' and '.inc'. Among other things, these files contain the authentication information for...

CVE-2000-0680

The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action...

CGI Script Center Account Manager 1.0 LITE / PRO - Administrative Password Alteration (1)

source: https://www.securityfocus.com/bid/1604/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Account Manager. In order to accomplish this, a user would access the following URL with a POST command:...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0838

Concrete details from connected documents show that Serv-U FTP before version 2.5e is affected by multiple issues: a buffer overflow in the SERVER when processing the SITE command can cause a denial of service, and a path disclosure via CWD commands for nonexistent directories can reveal the root...

CVE-2000-0395

Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request...

Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities

Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1115/info Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application...

Netscape Enterprise Server 3.0/3.6/3.51 - Directory Indexing

// source: https://www.securityfocus.com/bid/1063/info Netscape Enterprise Server 3.x includes a poorly documented feature that will allow remote users to view directory listings by appending various instructional tags to the URL. Although it can be disabled, Netscape Enterprise Server is shipped...

CVE-2000-0110

CVE-2000-0110 affects the WebSiteTool shopping cart application, where remote attackers can modify sensitive purchase information by manipulating hidden form fields in the shopping cart. The PT-2000-1098 entry corroborates this description but does not specify affected versions or a fix. No explo...

CVE-2000-0136

The CVE-2000-0136 entry concerns the Cart32 shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields. As per the linked documents, this affects Cart32 and is characterized by a network-remote access vector with low attack complexity an...

CVE-2000-0123

CVE-2000-0123 describes a vulnerability in the Filemaker shopping cart application where remote attackers can alter sensitive purchase information by manipulating hidden form fields. The available sources confirm the issue exists in the shopping cart component shipped with Filemaker, enabling inf...

CVE-2000-0134

The Check It Out shopping cart application contains a vulnerability that allows remote attackers to modify sensitive purchase information via hidden form fields. Described across CVE-2000-0134 sources, this flaw enables unauthenticated remote access with partial confidentiality and integrity impa...

CVE-2000-0104

CVE-2000-0104 concerns the Shoptron shopping cart application. The connected PT-2000-1092 entry confirms that remote attackers could modify sensitive purchase information via hidden form fields in the Shoptron cart. The PT entry notes that affected versions are not specified and provides no remed...

CVE-2000-0134

The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0135

The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0123

The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields...

CVE-1999-0086

Technical details are not publicly available in the provided connected documents. Monitor for updates on affected products, versions, root cause, and fixes.

CVE-1999-0597

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire...

CVE-1999-0249

The CVE-1999-0249 entry concerns Windows NT RSHSVC, where the RSHSVC program may allow remote users to execute arbitrary commands. The connected documents confirm the affected component (RSHSVC) and the impact (arbitrary command execution), but do not provide additional technical details such as ...