Microsoft Word 95979820002002 - INCLUDEPICTURE Document Sharing File Disclosure

Microsoft Word 95979820002002 - INCLUDEPICTURE Document Sharing File Disclosure source: https://www.securityfocus.com/bid/5764/info The INCLUDEPICTURE Field Code may be used to insert arbitrary URLs into a document. The INCLUDEPICTURE Field Code is reported to, under some circumstances, present a...

mldonkey Detection (telnet check)

mldonkey telnet appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. C Tenable Network Security, Inc. Not...

mldonkey Detection (WWW)

The mldonkey web interface appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. %NASLMINLEVEL 70300 C...

Microsoft Word 95979820002002 Excel 2002 - INCLUDETEXT Document Sharing File Disclosure

Microsoft Word 95979820002002 Excel 2002 - INCLUDETEXT Document Sharing File Disclosure source: https://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to,...

Microsoft Word 95/97/98/2000/2002 / Excel 2002 - INCLUDETEXT Document Sharing File Disclosure

source: https://www.securityfocus.com/bid/5586/info The Microsoft Word and Excel INCLUDETEXT Field Code may be used to insert an arbitrary local file into a document. The INCLUDETEXT Field Code is reported to, under some circumstances, present a security threat. If the INCLUDETEXT Field Code is...

Personal Web Sharing Long HTTP Request DoS

It was possible to kill the Personal Web Sharing service by sending it a too long request. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists References: To: [email protected] Subject: Personal Web Sharing...

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access source: https://www.securityfocus.com/bid/5276/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. BadBlue does not sufficiently...

RCS public file sharing vulnerability

Hi, This is a vulnerability Andreas and I found about eight weeks ago. This was then first reported to the vendor and CERT. CERT received it on 5/10/02 at 8:01pm. They haven't yet done anything with it as far as I can tell. - I haven't received anything from them except for the automated response...

Working Resources BadBlue 1.7.3 - cleanSearchString() Cross-Site Scripting

Working Resources BadBlue 1.7.3 - cleanSearchString Cross-Site Scripting source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web...

Working Resources BadBlue 1.7 - 'ext.dll' Cross-Site Scripting

source: https://www.securityfocus.com/bid/5086/info BadBlue is a P2P file sharing application distributed by Working Resources. The ext.dll ISAPI does not sufficiently sanitize input. Because of this, it is possible for a user to create a custom URL containing script code that, when viewed in a...

Working Resources BadBlue 1.7 - ext.dll Cross-Site Scripting

Working Resources BadBlue 1.7 - ext.dll Cross-Site Scripting source: https://www.securityfocus.com/bid/5086/info BadBlue is a P2P file sharing application distributed by Working Resources. The ext.dll ISAPI does not sufficiently sanitize input. Because of this, it is possible for a user to create...

eDonkey Detection

The remote host appears to be running eDonkey or one of its variants, which is commonly used for sharing music, films, and software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid11022; scriptversion"1.30";...

Microsoft Windows SMB Service Detection

The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...

Gnutella Servent Detection

The remote host is running a Gnutella 'servent', a P2P file sharing application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid10946; scriptversion"1.34"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2001-0503

Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled is affected by CVE-2001-0503, where a remote attacker can cause a denial of service by sending a malformed string to the NetMeeting service port (a variant of the NetMeeting Desktop Sharing vulnerability). The available sources confirm...

CVE-1999-1105

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...

CVE-1999-1105

CVE-1999-1105 affects Windows 95 when Remote Administration and File Sharing for NetWare Networks is enabled. The vulnerability arises because a share (C$) is created upon remote administrator login, enabling a remote attacker to read arbitrary files by mapping the network drive. The available so...

CVE-2001-0503

Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability...

BadBlue XSS vulnerabilities / Filesharing Server Worm

Strumpf Noir Society Advisories ! Public release ! -- -= BadBlue XSS vulnerabilities / Filesharing Server Worm =- Release date: Tuesday, February 26, 2002 Introduction: BadBlue is the technology behind Working Resources Inc.'s product line with the same name and which, amongst other things, also...

CVE-2001-1004

Affected software: gnut Gnutella client prior to 0.4.27. Vulnerability: cross-site scripting via file names containing script tags shared with other clients. Root cause: untrusted file-name content is rendered as script on recipients. Impact: remote script execution on other clients (as described...