4664 matches found
Выполнение команд в exim (code execution)
При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
Microsoft Windows NT 4.0 - NT4ALL Denial of Service source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in...
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in 'special mode' using 'NT4ALL'. In order to exploit NT4ALL...
Netscape/Mozilla и доступ к специальным файлам во всех OS (special device access)
При чтении html фрагмента вида img src="file:///dev/tty0" Netscape & Mozzilla подвешивают систему...
SECURITY.NNOV: special devices access in multiple archivers
Hello, Topic: Special devices access in multiple archivers Author: 3APA3A [email protected] Platform: Windows Affected Software: WinZIP Computing's WinZIP 8.0, PKWare PkZip 4.0, RARSoft WinRar 2.80 Risk: average Released: July, 5, 2001 SECURITY.NNOV advisories:...
Доступ к специальным устройствам во многих архиваторах (special device)
При извлечении файла файл может быть послан в специальное устройство...
CVE-2000-1109
CVE-2000-1109 affects Midnight Commander (mc) versions up to 4.x, specifically 4.5.51 and earlier. The issue arises when mc processes malformed directory names during directory opening, allowing a local user to gain privileges by creating directories that contain special characters followed by co...
CVE-2000-1164
The CVE-2000-1164 issue affects WinVNC, specifically the WinVNC3 registry key HKLM\Software\ORL\WinVNC3. The root cause is weak permissions that grant read/modify access to the Everybody group (and in some contexts to non-admin users), allowing extraction or alteration of the VNC password and oth...
Multiple archivers special DOS/Windows devices access
Topic: Special devices access in multiple archivers Author: 3APA3A Platform: Windows Affected Software: WinZIP Computing's WinZIP 8.0, PKWare PkZip 4.0, RARSoft WinRar 2.80 Risk: average Released: July, 5, 2001 SECURITY.NNOV advisories: http://security.nnov.ru/advisories Background: Archive...
CVE-2000-1164: Undefined Security Weakness
WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...
CVE-2000-1164
WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...
Дырка в Apache + PHP3 под Windows
Проблема обратного пути в директориях при использовании спец-символов...
Дырка в 24Link Webserver (avoid password protection )
Добавление спец символов к имени файла позволяет обойти защиту файла паролем...
Дырка в Authentix (authentication bypass)
Посредством специальных символов в URL возможно обойти процесс аутентификации...
Уязвимость в Novell Border Manager
Пользователь может получить доступ к блокированной URL применив специальные символы xx в имени директории...
winmail305.txt
I found some vulnerabilities if windmail run as a CGI application.tested On WindowsNT 4.0, Windmail 3.05 successfully. WindMail is a 32-bit Windows console program by geocel that gives you command-line e-mail messaging capability. You can download an evaluation copy of WindMail 3.0 at:...
CVE-1999-0783
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system...
ICQ Web Front Service guestbook.cgi DoS
The remote web server appears to be the ICQ Web Front service for ICQ. An unauthenticated attacker can crash the version of ICQ Web Front installed on the remote host by connecting to it and sending a special request, '/cgi-bin/guestbook.cgi?'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
