Pablo Software Solutions FTP Service 1.2 Anonymous Users Privileges Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7799/info An issue in Pablo FTP Service may make it possible for remote users to perform unauthorized actions. It has been reported that Pablo FTP Service does not sufficiently restrict the anonymous user account, which i...

Phorum 3.0.7 violation.php3 Arbitrary Email Relay Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin board style chats...

CoffeeCup Software Password Wizard 4.0 HTML Source Password Retrieval Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7023/info A problem with the software may make it possible for remote users to gain unauthorized access to restricted resources. This vulnerability exists in Password Wizard configured to generate Java applets to password...

Oracle Reports Server 6.0.8/9.0.2 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5262/info A problem with Reports Server could make it possible to gain sensitive information from the server. Under some circumstances, Reports Server may yield sensitive information to unauthenticated remote users. This...

Basilix Webmail 0.9.7 Incorrect File Permissions Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2198/info A vulnerability has been reported in basilix webmail v. 0.9.7b. Basilix Webmail ships with several configuration files that have the file extensions '.class' and '.inc'. Among other things, these files contain t...

IRIX 5.3/6.x 'netprint' Arbitrary Shared Library Usage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to...

1C: Arcadia Internet Store 1.0 Arbitrary File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2902/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of the components of this...

Microsoft IIS 3.0/4.0,Microsoft Personal Web Server 2.0/3.0/4.0 ASP Alternate Data Streams Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/149/info Microsoft IIS and other NT webservers contain a vulnerability that allows remote users to obtain the source code for an ASP file. When one appends ::$DATA to an asp being requested, the ASP source will be returne...

Mercury/NLM 1.4 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2641/info Mercury MTA is a mail-transfer agent available for Novell NetWare and Windows NT. Novell versions of the Mercury POP3 server prior to 1.48 are vulnerable to a buffer overflow caused by inadequate string handling...

SmartDesk WebSuite 2.1 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/278/info A buffer overflow vulnerability in SmartDesk WebSuite 2.1 allows malicious remote users to crash the server, and may at worst allow them to execute arbitrary code. WebSuite 2.1 will crash when the filename...

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.5/1.0/2.0 DoS

No description provided by source. source: http://www.securityfocus.com/bid/665/info A vulnerability in the Diva LAN ISDN Modem allows remote malicious users to lock up the modem requiring a hard reset. The vulnerability manifests itself when a remote users connects to the Diva HTTP port and send...

RobTex Viking Server 1.0.7 Relative Path Webroot Escaping Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2643/info The Viking Server is a freely available software package maintained and distributed by Robtex. The Viking Server provides multiple protocol service on Windows 95, 98, and NT systems. A problem in the software...

Microsoft ActiveSync 3.5 Null Pointer Dereference Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7150/info A problem with ActiveSync could make it possible for remote users to trigger a denial of service. It has been reported that under some circumstances, the ActiveSync wcescomm service can be forced to crash. Due t...

MS Internet Explorer <= 6.0.2900 SP2 (CSS Attribute) Denial of Service

No description provided by source. !-- Internet Explorer = 6.0.2900 SP2 suffers from a DoS vulnerability in which a remote users Internet Explorer session can be crashed when hovering their cursor over a specially made table. The fault occurs when the position CSS attribute is set to a table. Thi...

Active Classifieds 1.0 Arbitrary Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2942/info Active Classifieds is a CGI package that provides an online classified advertisement listing and management system. An origin validation error exists in the Free Edition of Active Classifieds that may allow remo...

Netscape Enterprise Server 3.0/3.6/3.51 Directory Indexing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1063/info Netscape Enterprise Server 3.x includes a poorly documented feature that will allow remote users to view directory listings by appending various instructional tags to the URL. Although it can be disabled, Netsca...

Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may be used to carry out further attacks...

OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)

No description provided by source. !/bin/sh OpenSSH = 3.6.p1 - User Identification. Nicolas Couture - [email protected] Description: -Tells you wether or not a user exist on a distant server running OpenSSH. Usage: -You NEED to have the host's public key before executing this script...

Planetmoon Guestbook Clear Text Password Retrieval Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7167/info A vulnerability has been reported in Planetmoon Guestbook. It has been reported that remote users may be able to retrieve clear text password lists. Access to this data may allow an attacker to carry out further...

BlazeBoard 1.0 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8188/info It has been alleged that BlazeBoard fails to adequately protect the contents of a directory in a default install. It is therefore possible for remote users to request files from this directory. This could expose...