4138 matches found
Доступ к специальным устройствам во многих архиваторах (special device)
При извлечении файла файл может быть послан в специальное устройство...
CVE-2000-1164
The CVE-2000-1164 issue affects WinVNC, specifically the WinVNC3 registry key HKLM\Software\ORL\WinVNC3. The root cause is weak permissions that grant read/modify access to the Everybody group (and in some contexts to non-admin users), allowing extraction or alteration of the VNC password and oth...
CVE-2000-1109
CVE-2000-1109 affects Midnight Commander (mc) versions up to 4.x, specifically 4.5.51 and earlier. The issue arises when mc processes malformed directory names during directory opening, allowing a local user to gain privileges by creating directories that contain special characters followed by co...
Multiple archivers special DOS/Windows devices access
Topic: Special devices access in multiple archivers Author: 3APA3A Platform: Windows Affected Software: WinZIP Computing's WinZIP 8.0, PKWare PkZip 4.0, RARSoft WinRar 2.80 Risk: average Released: July, 5, 2001 SECURITY.NNOV advisories: http://security.nnov.ru/advisories Background: Archive...
CVE-2000-1164
WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...
Дырка в Apache + PHP3 под Windows
Проблема обратного пути в директориях при использовании спец-символов...
Дырка в 24Link Webserver (avoid password protection )
Добавление спец символов к имени файла позволяет обойти защиту файла паролем...
Дырка в Authentix (authentication bypass)
Посредством специальных символов в URL возможно обойти процесс аутентификации...
Уязвимость в Novell Border Manager
Пользователь может получить доступ к блокированной URL применив специальные символы xx в имени директории...
winmail305.txt
I found some vulnerabilities if windmail run as a CGI application.tested On WindowsNT 4.0, Windmail 3.05 successfully. WindMail is a 32-bit Windows console program by geocel that gives you command-line e-mail messaging capability. You can download an evaluation copy of WindMail 3.0 at:...
CVE-1999-0783
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system...
ICQ Web Front Service guestbook.cgi DoS
The remote web server appears to be the ICQ Web Front service for ICQ. An unauthenticated attacker can crash the version of ICQ Web Front installed on the remote host by connecting to it and sending a special request, '/cgi-bin/guestbook.cgi?'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-1999-0783
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system...
MS:B8A4AF63-2AE1-4FFD-81A3-B258CE8FEACD
...
MS:7372C903-ACB3-4313-ADD4-2B802BF43B74
...
Special Small Business Server 2003 R2 Detectoid: To be used only by Exchange
This detectoid is being created on the Exchange side to get an update out. Normally this update would be created on the SBS side but there isn't enough time for that to happen...
