6983 matches found
CVE-2002-1790
The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...
CVE-2002-1978: Undefined Security Weakness
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command...
CVE-2002-1979: Improper Input Validation
WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causi...
[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation
GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...
CVE-2005-1646
The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of...
CVE-2003-1183
The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access...
CVE-2003-1183: Undefined Security Weakness
The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access...
CVE-2005-0964
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions...
tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.
everything is now patched in CVS-current, including the ISIS bug infinite loop DOS bugs in tcpdump: ISIS isisprint infinite loop DOS. BGP RTROUTINGINFO infinite loop DOS. LDP ldpprint infinite loop DOS. the ISIS bug is in 3.8.x/3.9.1/CVS. did not check below 3.8.x the BGP and LDP bugs seem to be...
CVE-2005-0964
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions...
CVE-2005-0964
Kerio Personal Firewall 4.1.2 and earlier has a local bypass vulnerability where a malicious process impersonates a legitimate, less-restricted process to bypass firewall rules. This can allow local users to circumvent protections. The CVE entry notes a MEDIUM impact (base score 4.6); no specific...
CVE-2005-0964: Undefined Security Weakness
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions...
[Full-disclosure] BakBone products multiple vulnerabilities
The Hat-Squad has found 2 exploitable vulnerabilities affecting BakBone NetVault Backup Software 6.x/7.x At this moment writing this advisory, no decent communications were established with the BakBone technicians, we recommand to set strict ACL rules on the files configure.cfg and to filter all...
[Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities
Hat-Squad Advisory: BakBone NetVault Remote Heap and Local Buffer Overflow April 1, 2005 Product: BakBone NetVault Vendor URL: http://www.bakbone.com Version: NetVault 7.x, 6.x Vulnerability: Remote and Local Heap Buffer overflows Release Date:1 April 2005 Vendor Status: 17-3-2005: vendor notifie...
CVE-2004-0986
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers...
CVE-2004-0986
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers...
CVE-2004-0986
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers...
DEBIAN-CVE-2004-0986
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers...
USN-81-1: iptables vulnerability
Faheem Mitha noticed that the "iptables" command did not always load the required modules on its own as it was supposed to. This could lead to firewall rules not being loaded on system startup...