Apache WebDAV Module PROPFIND Arbitrary Directory Listing

The WebDAV module can be used to obtain a listing of the remote web server directories even if they have a default page such as index.html. This allows an attacker to gain valuable information about the directory structure of the remote host and could reveal the presence of files which are not...

Открытый пароль в Shiva

Открытый на чтение файл $SHIVAHOMEDIR/insnmgmt/shivaaccessmanager/radtac.ini содержит пароль корневой структуры LDAP в открытом тексте...

SHGetPathFromIDList.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Windows Api SHGetPathFromIDList Buffer Overflow To all those people who sent email to us asking for more information about the SHGetPathFromIDList Windows Api overflow. Here is a more specific description about the problem. All Structure lengths, or...

cobalt.cgiwrap.txt

There is a problem actually several with the "cgiwrap" program on Cobalt RaQ2 servers. It is supposed to run CGI programs as the proper user instead of "nobody" to make CGIs a little more secure. The Cobalt directory structure is as follows: /home/sites/site1/ - top level directory of the site...

fts.find.du.bsd.txt

Date: Wed, 12 May 1999 14:32:42 +0400 From: Stas Kisel To: [email protected] Subject: fts, du, find Hi. I use FreeBSD-2.2.8 and FreeBSD-2.2.7 and I know that these versions are no longer supported, but: 1. There are many people still using 2.2 2. This bug probably applies to FreeBSD-3.1 and ev...

Network Associates Gauntlet Firewall 5.0 - Denial of Service

// source: https://www.securityfocus.com/bid/556/info There is a vulnerability in Gauntlet Firewall 5.0 which allows an attacker to remotely cause a denial of service. The vulnerability occurs because Gauntlet Firewall cannot handle a condition where an ICMP Protocol Problem packet's ICMPPARAMPRO...

Novell Netware 4.14.11 - SP5B NDS Default Rights

Novell Netware 4.14.11 - SP5B NDS Default Rights source: https://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options ...

Microsoft IIS 3.0/4.0 - Upgrade BDIR.HTR

source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts, and version 3.0 of IIS came with an...

CVE-1999-1283

Opera 3.2.1 allows remote attackers to cause a denial of service application crash via a URL that contains an extra / in the http:// tag...

Linux Kernel 2.02.0.33 - i_count Overflow (PoC)

Linux Kernel 2.02.0.33 - icount Overflow PoC / source: https://www.securityfocus.com/bid/388/info The icount member in the Linux inode structure is an unsigned short integer. It can be overflowed by mapping a single file too many times, allowing for a local user to possibly gain root access on th...