1346 matches found
Irix ineffective NFS protection
If any access option contains only wildcards server ignores access checks...
CVE-2003-0730
...
CGI bugs
No description provided...
CVE-2002-1341
...
SSI & CSS execution in MakeBook 2.2
DownBload Security Research Lab Advisory ------------------------------------------------------------------------- Advisory name: SSI & CSS execution in MakeBook 2.2 Advisory number: 5 Application: MakeBook 2.2 CGI script Application author: Kristina Pfaff-Harris Source:...
CGI bugs
No description provided...
Обход защиты в LIDS (protection bypass)
Несколько различных проблем...
Межсайтовый скриптинг в FML (crossite scripting)
No description provided...
More Multiple Vulnerabilities in CBOS
...
~..~!guano
Wednesday, 28 March, 2001 The BAT! .. is a feisty multi-tasking email client that is rapidly gaining popularity and for good reason. Cursory examination of it reveals solid effective security measures on all fronts, including non-browser dependent html viewing with on/off switch, random named fil...
Security Advisory: Microsoft Outlook 2000 vCard Buffer Overrun (additional information) - Revised
-- Corsaire Limited Security Advisory -- Title: Microsoft Outlook 2000 vCard Buffer Overrun additional information - Revised Date: 01.03.01 Application: Outlook 2000, Outlook Express Environment: WinNT, Win2000 Author: Martin O'Neal [email protected] Audience: General distribution -- Scop...
Microsoft Windows LAN Manager SNMP LanMan Shares Disclosure
It is possible to obtain the list of LanMan shares on the remote host by sending SNMP requests with the OID 1.3.6.1.4.1.77.1.2.27.1.1. An attacker may use this information to gain more knowledge about the target host. TRUSTED...
Weak CRC allows RC4 encrypted SSH1 packets to be modified without notice
Overview There is an information integrity vulnerability in the SSH1 protocol that allows RC4 encrypted packets to be modified without notice. Description Preconditions: Client has requested RC4 and server supports it. Compression is disabled. When using the RC4 stream cipher, SSH1 uses a cyclic...
Переполнение буфера в canna
Классическое переполнение буфера...
lynx-2.8.x.txt
// This message hasn't been sent to lynx-dev list, as it requires // subscription for sending bugreports. Sorry for that. Since 2.7 releases ?, lynx has mechanisms to avoid spoofed 'special URLs'. It's designed to protect lusers from malicious, internal pseudo-protocols like LYNXDIRED://,...
Squid cachemgr.cgi Proxied Port Scanning
RedHat Linux 6.0 installs by default a squid cache manager cgi script with no restricted access permissions. This script could be used to perform a port scan from the cgi-host machine. %NASLMINLEVEL 70300 This script was written by Alexis de Bernis See the Nessus Scripts License for details...
