8999 matches found
CVE-2003-0732
CiscoWorks Common Management Foundation CMF 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages...
Microsoft Internet Explorer fails to properly handle Dynamic HTML (DHTML) behaviors in restricted zones
Overview Microsoft Internet Explorer contains a logic error in the way that it handles DHTML. This error makes it possible to move content from the less trusted Restricted zone into the Internet zone. This vulnerability permits an attacker to execute arbitrary code in the context of the Internet...
Portcullis Security Advisory: CiscoWorks 2000 Privilege Escalation Vulnerabilities
Portcullis Security Advisory CiscoWorks 2000 Priviledge Escalation Vulnerability Vulnerability discovery and development: [email protected] Affected systems: Ciscoworks 2000 Details: Portcullis have discovered that using the default Guest account which has no password set, that it i...
wam1040.txt
Directory Traversal Vulnerability in 121 WAM! Server 1.0.4.0 Url: http://www.121software.com/121wam/server.asp "Imagine if you could centralise the management of your FTP server farm and give customers additional database management capability." "121 WAM! Server is a standard FTP server for...
CVE-2003-0476
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors...
CVE-2003-0639: Undefined Security Weakness
Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication...
CCBill WhereAmI.CGI Remote Arbitrary Command Execution Vulnerability
Description It has been reported that whereami.cgi distributed by CCBill does not properly handle some types of input. Because of this, an attacker may be able to gain access to a system with the privileges of the web server process. Technologies Affected CCBill whereami.cgi Recommendations Block...
CVE-2002-0875
Removed by vendor...
CVE-2002-1031
KeyFocus KF web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 null character...
CVE-2001-1407
Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug...
CVE-2002-1031: Undefined Security Weakness
KeyFocus KF web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 null character...
CVE-2001-1407: Undefined Security Weakness
Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug...
CVE-2002-0875: Undefined Security Weakness
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...
CVE-2002-0571: Undefined Security Weakness
Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax...
Apache Jakarta Tomcat 3 URL parsing vulnerability
OVERVIEW ======== Tomcat is a JSP/Servlet implementation developed at the Apache Software Foundation. Tomcat versions 3.3.1 and earlier contain some security vulnerabilities which allow a remote user to retrieve listings of directories despite index.html or index.jsp files. It is also possible to...
PT-2003-1135 · Polycom · Polycom Viewstation
Name of the Vulnerable Software and Affected Versions: Polycom ViewStation versions prior to 7.2.4 Description: The issue allows remote attackers to guess usernames and passwords via a brute force attack because the Telnet service does not restrict the number of failed login attempts...
CVE-2002-1715
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...
CVE-2002-2275
Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe...