Выполнение команд в exim (code execution)

При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...

CVE-1999-1018

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets...

CVE-1999-1018

CVE-1999-1018 concerns Linux kernels 2.2.10 and earlier, where the IP fragmentation reassembly step is performed after some header checks. The issue allows a remote attacker to bypass IP filtering rules by sending multiple fragments with 0 offsets, undermining filters that rely on header informat...

FreeBSD-SA-01:53.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:53 Security Advisory FreeBSD, Inc. Topic: ipfw me' on P2P interfaces matches remote address Category: core Module: ipfw Announced: 2001-08-17 Credits: Igor M Podlesny...

flaw in RH ``mkpasswd'' command

Hey, The mkpasswd password generator that ships in the expect'' package of at least RedHat 6.2 generates only a relatively small number 2^15 for the default password length of passwords. Presumably this is a result of trying to apply too many rules of what is a good'' password to the generation...

Apache Httpd < 1.3.14 : Rewrite rules that include references allow access to any file

The Rewrite module, modrewrite, can allow access to any file on the web server. The vulnerability occurs only with certain specific cases of using regular expression references in RewriteRule directives: If the destination of a RewriteRule contains regular expression references then an attacker...

Cisco PIX Firewall &#40;smtp content filtering hack&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How to escape "fixup smtp" of Cisco Pix Firewall: The Cisco Pix Firewall normally restrict some protocol commandhttp,ftp,smtp and manage multisession protocolh323, ftp,sqlnet . I made some test on a BSDI3.0 running sendmail9 placed in the dmz . The Pi...

FreeBSD-SA-00:23.ip-options

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:23 Security Advisory FreeBSD, Inc. Topic: Remote denial-of-service in IP stack REVISED Category: core Module: kernel Announced: 2000-06-19 Revised: 2000-07-11 Affects:...

CVE-2022-43786

CVE-2022-43786 entry is rejected/not used per Initial Description.

CVE-2022-43817

CVE-2022-43817 entry is rejected/not used per the Initial Description.

CVE-2022-43783

CVE-2022-43783 is rejected/not used per Initial Description; this entry does not represent an active vulnerability.

CVE-2022-43820

CVE-2022-43820 is rejected/not used per Initial Description.

CVE-2022-43805

This CVE-2022-43805 entry is rejected/not used and does not represent an active vulnerability.

CVE-2022-43787

CVE-2022-43787 entry is rejected/not used and does not represent an active vulnerability.

CVE-2022-43790

CVE-2022-43790 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2022-43793

CVE-2022-43793 is rejected/not used per the Initial Description.

CVE-2022-43818

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2022-43830

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 R2 (KB2896496)

Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 R2 KB2896496...

Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 (KB2896496)

Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 KB2896496...