4097 matches found
Login errors in 1.3
When logging in as our special user who is restricted to one certain project, I get this error message from secure/Dashboard.jspa java.lang.IllegalArgumentException: Source may not be null at webwork.util.SubsetIteratorFilter.setSourceSubsetIteratorFilter.java:33 at...
Login errors in 1.3
When logging in as our special user who is restricted to one certain project, I get this error message from secure/Dashboard.jspa java.lang.IllegalArgumentException: Source may not be null at webwork.util.SubsetIteratorFilter.setSourceSubsetIteratorFilter.java:33 at...
ArGoSoft 1.8 Mail Server - Directory Traversal
source: https://www.securityfocus.com/bid/5144/info ArGoSoft Mail Server is an STMP, POP3 and Finger server for Microsoft Windows environments. ArGoSoft has a built in web server to enable remote access to mail. A directory traversal issue has been reported in the web server, which could allow...
Re: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express
At Wednesday 5/15/2002 03:11 PM +0400, you wrote: Title: Special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook All versions of Windows have a reserved filenames referred to special devices such as prn, aux, nul, etc also called DOS devices. This might be related to a...
Re[2]: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express
Dear Chad Loder, You're right! bgsound src=3D"111.111.111.111newfile.wav" causes IE to connect to 111.111.111.111 via NetBT. Depending on LMCompatibilityLevel it may cause user's cleartext password or NTLMv1 challenge to leak. It's very serious bug. --Friday, May 17, 2002, 1:38:16 PM, you wrote t...
Unauthorized access to special devices and NetBIOS connections in Microsoft Internet Explorer
With IFRAME and BGSOUND tags it's possible to cause DoS against Outlook Express or to send data to special device. It's also posible to cause IE to establish NetBIOS connection with any untrusted host...
dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express
Русская версия этой advisory приведена ниже. Original version of this advisory: http://www.security.nnov.ru/advisories/msiedos.asp Title: Special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook Authors: ERRor, 3APA3A Date: May, 14 2002 Affected: Internet Explorer 6.0...
Special device access and DoS in Microsoft Internet Exporer
Title: special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook Authors: ERRor, 3APA3A Date: May, 14 2002 Affected: Internet Explorer 6.0 Vendor: Microsoft Risk: Average to high Remote: Yes Exploitable: Yes Vendor notified: April, 24 2002 Intro: All versions of Windows...
DoS через специальные устройства в Domino (DOS DoS)
Обращение к CGI-файлу с именем содержащим название DOS-устройства и длинным расширением приводит к запуску cmd.exe...
Многочисленные ошибки в BPM Studio (multiple bugs)
Доступ к специальным устройствам, обратный путь в каталогах...
Доступ к специальным устройствам в TheBat! (special device access)
Можно прикрепить файл при получении котоорго будет открыто специальное устройство...
SECURITY.NNOV: Special device access in The Bat!
Dear bugtraq, Topic: Special device access in The Bat! Author: 3APA3A [email protected] Date: February, 25 2002 Software: The Bat! 1.53d, 1.54beta Vendor: Ritlabs http://www.thebat.net Risk: Low to average Remote: Yes Exploitable: Yes Vendor Status: Notified, not verified Details: The Bat!...
Special device access in The Bat!
Topic: Special device access in The Bat! Author: 3APA3A Date: February, 25 2002 Software: The Bat! 1.53d, 1.54beta Vendor: Ritlabs http://www.thebat.net Risk: Low to average Remote: Yes Exploitable: Yes Vendor Status: Notified, not verified Details: The Bat! has special device access bug. If The...
Доступ к специальным устройствам в некоторых Web/FTP-серверах (special devices)
Возможно чтение/запись специальных устройств...
Выполнение команд в exim (code execution)
При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in 'special mode' using 'NT4ALL'. In order to exploit NT4ALL...
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
Microsoft Windows NT 4.0 - NT4ALL Denial of Service source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in...
Netscape/Mozilla и доступ к специальным файлам во всех OS (special device access)
При чтении html фрагмента вида img src="file:///dev/tty0" Netscape & Mozzilla подвешивают систему...
SECURITY.NNOV: special devices access in multiple archivers
Hello, Topic: Special devices access in multiple archivers Author: 3APA3A [email protected] Platform: Windows Affected Software: WinZIP Computing's WinZIP 8.0, PKWare PkZip 4.0, RARSoft WinRar 2.80 Risk: average Released: July, 5, 2001 SECURITY.NNOV advisories:...