596 matches found
Serious Sam Engine 1.0.5 - Remote Denial of Service
Serious Sam Engine 1.0.5 - Remote Denial of Service // source: https://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the clie...
Serious Sam Engine 1.0.5 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the client sends a certain malformed parameter to the server...
CVE-2002-0462
CVE-2002-0462 affects bigsam_guestbook.php (Big Sam Built-In Guestbook Stand-Alone Module) version 1.1.08 and earlier. The vulnerability arises from a displayBegin parameter containing a very large number, which can cause denial of service via CPU consumption or leak the web server’s absolute pat...
CVE-2002-0462
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
CVE-2002-0462: Undefined Security Weakness
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
Microsoft Windows XP weak permissions
Weak permissions for restore information allow to view and change sensitive data, including SAM...
CVE-2002-0462
bigsamguestbook.php for Big Sam Built-In Guestbook Stand-Alone Module 1.1.08 and earlier allows remote attackers to cause a denial of service CPU consumption or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error...
[ARL02-A11] Big Sam (Built-In Guestbook Stand-Alone Module) Multiple Vulnerabilities
+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A11 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Big Sam Built-In Guestbook...
Syskey reuses keystream
Overview Versions of SYSKEY in use prior to December, 1999 leave the SAM database vulnerable to cryptanalytic attacks. Description SYSKEY is a utility introduced in Microsoft Windows NT 4.0 service pack 3 to provide strong cryptographic protection to the SAM password database. The protection SYSK...
CVE-1999-0435
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...
CVE-1999-0435
CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...
CVE-1999-0435: Undefined Security Weakness
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...
CVE-1999-0994
SYSKEY in Windows NT pre-December 1999 had a flaw that reuses part of an RC4 keystream to encrypt the SAM database. This enables dictionary attacks against SAM passwords if an attacker obtains a copy of the SAM database. Microsoft addressed this in December 1999 (MS99-056). The CERT advisory reit...
teamshare teamtrack 3.0 - Directory Traversal
teamshare teamtrack 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested...
teamshare teamtrack 3.0 - Directory Traversal
source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested paths containing the ../ sequence. Because of...