CVE-2001-0788

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...

CVE-2001-0786

Vulnerability summary (CVE-2001-0786) : Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores usernames and passwords in plaintext in the pUser.Dat file. The issue affects the authentication data, enabling potential privacy disclosure if the password file is exposed. The N...

CVE-2001-0785

Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0788

CVE-2001-0788 affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. Remote attackers can obtain the server's absolute directory path by viewing the Location header; no remediation details are provided in the supplied documents.

mcaffee.mycio.traversal.txt

----- Begin Hush Signed Message from [email protected] ----- -= SECURITY ADVISORY =- McAfee ASaP Virusscan - myCIO HTTP Server Directory Traversal Vulnerabilty Date: 28 June 2001 Impact: HIGH Affected: Any machine running the McAfee Agent ASaP VirusScan Software Tested on: NT Workstation 4.0,...

NSI Rwhoisd 1.5 - Remote Format String

NSI Rwhoisd 1.5 - Remote Format String // source: https://www.securityfocus.com/bid/3474/info Rwhoisd is a publicly available RWHOIS server daemon for Unix based systems developed and maintained by Network Solutions Inc. Rwhoisd contains a remotely exploitable format string vulnerability. It is...

NSI Rwhoisd 1.5 - Remote Format String

// source: https://www.securityfocus.com/bid/3474/info Rwhoisd is a publicly available RWHOIS server daemon for Unix based systems developed and maintained by Network Solutions Inc. Rwhoisd contains a remotely exploitable format string vulnerability. It is possible to overwrite memory by if a...

ADVISORY SSRT0715 Compaq Management Software Potential Security Vulnerability

The important part of this for this list is the impact and solution available for NT even though it's lengthy and covers all affected platforms. regards -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SOFTWARE SECURITY RESPONSE TEAM Compaq Global Services - Compaq Computer Corporation Send Security...

Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS

It was possible to disable the remote IIS server by making a specially formed PROPFIND request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This security check is heavily based on Georgi Guninski's post on the bugtraq mailing list include'deprecatednasllevel.inc'; include'compat.inc'; if...

Netscape E.S. Web Publisher ACL Vulnerabilities

Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...

FreeBSD-SA-01:06.zope

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:06 Security Advisory FreeBSD, Inc. Topic: zope vulnerability allows escalation of privileges Category: ports Module: zope Announced: 2001-01-15 Credits: Erik Enge Affects...

Advisory: exmh symlink vulnerability

Author: Stan Bubrouski [email protected] Date: December 31, 2000 Package: exmh Versions affected: 2.2 and probably previous versions. Severity: A malicious local user could use a symlink attack to overwrite any file writable by the user executing exmh. Problem: When exmh detects a problem at start...

IBM DB2 SQL DOS

1.Description The DB2 Universal Database builds upon the stability and performance of DB2 on the mainframe and provides the features required in a distributed database product. DB2 Universal Database UDB is IBM's relational database server solution for the UNIX, OS/2 and Windows NT/2000 operating...

Alabanza Control Panel 3.0 - Domain Modification

source: https://www.securityfocus.com/bid/1710/info Alabanza is a web hosting provider that offers automated solutions for virtual domain hosting. A vulnerability exists in the software implemented for automated domain administration. Modification, deletion, and addition of domains and MX and CNA...

FreeBSD-SA-00:40.mopd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:40 Security Advisory FreeBSD, Inc. Topic: mopd port allows remote root compromise Category: ports Module: mopd Announced: 2000-08-28 Credits: Matt Power , OpenBSD Affects...

bb-14h2.txt

versions affected: bb14h2 current and older exploit: bbd listens for incoming connections on port 1984. Using telnet or the bb client, it is possible to connect and create a filename with an arbitrary extension, as the extension is not rigorously checked. As this file is droped into a directory...

bugzpladv1_eng.txt

0x15.0x05.Y2K ------------------------------------- BugzPL ADVISORY 1, final version ------------------------------------- Bypassing restricted bash for fun and profit ; I. Introduction bash-2 gives us a possibility to use a shell in restricted mode. This mode can be initiated using several metho...

netsolbug.txt

networksolutions.com: www security hole. may/9/2000 Major security issue with networksolutions.comeasysteps.pl. I was in r00tabega, and someone relayed thisit was told to me Mr^Chaos found the orginal read bug:...

midnight-commander-tty.txt

Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice More kernel 'things' - tty allocation ------------------------------------- Hmm, I've posted it months ago, and I have no idea why it hasn't been approve...

X11.tmp.txt

Date: Mon, 2 Nov 1998 23:04:43 +0100 From: Pavel Kankovsky To: [email protected] Subject: X11 cookie hijacker drwxrwxrwx 2 root root 1024 Oct 30 19:57 /tmp/.X11-unix Hang on, aren't those dangerous permissions? Pretty dangerous. Shall I look for my old cookie hijacker? Please post the bloody...