827 matches found
Microsoft Internet Explorer saved references and identifiers crossite scripting
By saving location.assign method of parent window it's possible to access it content any time. It's also possible to reference frame by it's identifier...
Trillian Instant Messaging 0.x - Credential Encryption
// source: https://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with every installation of the...
Linux kernel setgid implementation flaw
Hi, I believe the following to be accurate and of some interest to bugtraq readers, although i did not have time to extensively test it, nor did i warn the vendor, since 1 this is at most a undirect risk - IMHO - and 2 i am going on holidays so i had to balance betweeen disclosing now and letting...
Protection bypass in linux
setgid call doesn't change saved gid...
CVE-1999-0429
The CVE-1999-0429 issue affects the Lotus Notes 4.5 client. The vulnerability arises when the user does not enable the Encrypt Saved Mail setting, allowing a copy of encrypted mail to be sent in the clear over the network. The NVD metrics indicate partial confidentiality and integrity/availabilit...