1611 matches found
Microsoft Internet Explorer 6 - ADODB.Stream Object File Installation
source: https://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security Zones with relaxed security...
CVE-2003-0599: Undefined Security Weakness
Unknown vulnerability in the Virtual File System VFS capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root...
CVE-2003-0374: Undefined Security Weakness
Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."...
CVE-2003-0255: Undefined Security Weakness
The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path...
Linux Kernel 2.2.x/2.4.x - I/O System Call File Existence
/ source: https://www.securityfocus.com/bid/7279/info A weakness has been discovered on various systems that may result in an attacker gaining information pertaining to the existence of inaccessible files. The problem lies in the return times when attempting to access existent and non-existent...
CVE-2001-1406: Undefined Security Weakness
processbug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent...
CVE-2002-1269: Undefined Security Weakness
Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...
CVE-2001-1390: Undefined Security Weakness
Unknown vulnerability in binfmtmisc in the Linux kernel before 2.2.19, related to user pages...
CVE-2002-1041: Undefined Security Weakness
Unknown vulnerability in DCE 1 SMIT panels and 2 configuration commands, possibly related to relative pathnames...
CVE-2001-1395: Undefined Security Weakness
Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact...
CVE-2001-1396: Undefined Security Weakness
Unknown vulnerabilities in strnlenuser for Linux kernel before 2.2.19, with unknown impact...
iBill ibillpm.pl Password Generation Weakness
The remote host is running iBill, an internet billing application. Some versions of the 'ibillpm.pl' CGI use a weak password management system that can be brute-forced. No flaw was tested. Your script might be a safe version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and...
CVE-2001-1277
The CVE-2001-1277 issue affects the makewhatis component of the man package prior to version 1.5i2. A local attacker belonging to the group man can cause arbitrary files to be overwritten by crafting a man page name containing shell metacharacters, exploiting insufficient validation during proces...
CVE-2002-0176: Undefined Security Weakness
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe...
CVE-2001-1360: Undefined Security Weakness
Vulnerability in Scanner Access Now Easy SANE before 1.0.5, related to pnm and saned...
CVE-2001-1362: Undefined Security Weakness
Vulnerability in the server for nPULSE before 0.53p4...
CVE-2001-1364: Undefined Security Weakness
Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified...
CVE-2001-1361: Undefined Security Weakness
Vulnerability in The Web Information Gateway TWIG 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links...
CVE-2002-0305: Undefined Security Weakness
Zero One Tech ZOT P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge...
