5183 matches found
IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities
Binary data 5077.prm...
TCP RST packets spoofing
By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...
CVE-2004-1877
The psubmiturl value in the sample login form in the Oracle 9i Application Server 9iAS Single Sign-on Administrators Guide, Release 29.0.2 for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password...
FreeBSD Security Advisory FreeBSD-SA-03:08.realpath
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:08.realpath Security Advisory The FreeBSD Project Topic: Single byte buffer overflow in realpath3 Category: core Module: libc Announced: 2003-08-03 Credits:...
CVE-2002-2243
Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service refused connections by opening a connection and not closing it...
MDaemon DoS
Сервер разрешает только одно соединение, которое не отключается по таймауту. Кроме того, имеется переполнение буфера в IMAP...
Pyramid Research Project - atphttpd security advisorie
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -=================================================================- SECURITY ADVISORY PYR/MID, Research Project - 101002 Members: Apm, flea, thread Title: ATP HTTP Daemon v0.4b Buffer Overflow Author: thread Vulnerable: ATP HTTP Daemon = v0.4b...
CVE-2002-0204
Buffer overflow in GNU Chess gnuchess 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command...
IBM DB2 Multiple CGI Single Byte Request Remote DoS
It was possible to crash the IBM DB2 database service by connecting to the affected service and sending just one byte to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10871; scriptversion"1.23";...
CVE-1999-1559
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D control d character, which locks other users out of the switch because it only supports one session at a time...
Immunity Canvas: ORACLE8LISTENER_WIN32
Name| oracle8listenerwin32 ---|--- CVE| CVE-2001-0499 Exploit Pack| CANVAS Description| Oracle8i TNS Listener stack overflow Notes| References: http://otn.oracle.com/deploy/security/pdf/nainet8bof.pdf CVE Name: CVE-2001-0499 VENDOR: Oracle Repeatability: Single shot Date public: 27-06-2001 CERT...
Дырка в Spy Anywhere (unprotected admin access)
Используя парль из одного символа можно подключиться с привилегиями администратора...
CVE-2000-0219
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt...
RedHat Linux 6.0 - Single User Mode Authentication
RedHat Linux 6.0 - Single User Mode Authentication source: https://www.securityfocus.com/bid/1005/info A vulnerability exists in the manner in which RedHat Linux 6.0 protects the obtaining of a shell by booting single user mode. RedHat will prompt for the root password upon entering single user...
RedHat Linux 6.0 - Single User Mode Authentication
source: https://www.securityfocus.com/bid/1005/info A vulnerability exists in the manner in which RedHat Linux 6.0 protects the obtaining of a shell by booting single user mode. RedHat will prompt for the root password upon entering single user mode. Pressing ^C causing a SIGINT to be sent...
PADLOCK.txt
LOWNOISE Advisory: [email protected] by ET. PADLOCK-IT 1.01 =============== DISCLAIMER: Learn, there are dark things behind a nice GUI. Well, maybe this isnt a topic for bugtraq but many people is using this kind of programs to protect all kind of passwords. Dial-up passwords, UNIX accounts, etc...
PT-1997-1154 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT user having inappropriate rights or privileges. This includes privileges such as Act as System, Add Workstation, Backup, Change System Time, Create...
CVE-2023-3353
CVE-2023-3353 is rejected/not used; CVE-2023-3352 is the active entry.
PT-2007-7477 · Linux +1 · Linux +5
Name of the Vulnerable Software and Affected Versions: linux-headers-2.6.18-5 versions 2.6.18-5 linux-image-2.6.18-5 versions 2.6.18-5 linux-modules-2.6.18-5 versions 2.6.18-5 linux-support-2.6.18-5 versions 2.6.18-5 Description: The issue affects the Linux kernel and may lead to a denial of...
