750 matches found
Маленькая дырка в formmail
Атакующий может просмотреть переменные окружения на сервере. Кроме того, возможна безнаказанная рассылка спама...
efax
Didn't see this mentioned before... hdm@sliver: which efax /opt/kde2/bin/efax hdm@sliver: ls -la /opt/kde2/bin/efax -rwsr-xr-x 1 root root 96689 Aug 16 10:23 /opt/kde2/bin/efax hdm@sliver: efax -h efax: Tue Jan 15 18:43:28 2002 efax v 0.9a-001114 Copyright 1999 Ed Casas efax: Tue Jan 15 18:43:28...
Microsoft Windows 2000 SMTP service fails to properly authenticate credentials of unauthorized user (MS01-037)
Overview A vulnerability exists in the SMTP service installed by default on Microsoft Windows 2000 Server and optionally on Windows 2000 professional that could allow an intruder to use the service to send mail. Description The Simple Mail Transfer Protocol SMTP is the standard protocol used to...
Дырка в MailFile
С помощью локальной модификации формы можно выслать себе любой файл...
Дырка в Pegasus Mail
Если ссылки mailto: обрабатываются Pegasus Mail, то с помощью подобной ссылки можно отправить любой файл с компьютера пользователя по любому адресу без подтверждения пользователем...
Microsoft Windows Alerter Service Social Engineering Weakness
The alerter service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by an attacker who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack C Tenable Network Security, Inc...
CVE-2000-0082
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML...
cron_root_patch.txt
Subject: Vixie Cron version 3.0pl1 vulnerable to root exploit To: [email protected] Vixie Cron version 3.0pl1 vulne.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xAE8F7CF5 Signed: 8/28/99 11:42:41 PM Verified: 9/22/99 1:44:11 AM BEGIN...