6211 matches found
Samba enum_csc_policy Data Structure Termination Remote Overflow
The remote Samba server, according to its version number, is vulnerable to a possible buffer overflow because it fails to properly terminate the 'enumcscpolicy' struct. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exis...
PHP Interpreter 3.0.x4.0.x4.14.2 - Direct Invocation Denial of Service
PHP Interpreter 3.0.x4.0.x4.14.2 - Direct Invocation Denial of Service // source: https://www.securityfocus.com/bid/5280/info It is possible, under some circumstances, for remote attackers to invoke the PHP interpreter from the web. If the interpreter is invoked with no command line options, it...
Various Vulnerabilities in Norton Anti-Virus 2002
Various Vulnerabilities in Norton Anti-Virus 2002 ++++++++++++++++++++++++++++++++++++ Scope ---------- Edvice recently tested NAV 2002's ability to detect viruses in incoming e-mail messages. NAV 2002 includes an Email protection feature that scans incoming and outgoing e-mails for viruses. The...
CVE-2002-0001
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...
Security Update: [CSSA-2001-SCO.39] Open UNIX, UnixWare 7: timed does not enforce nulls
To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: timed does not enforce nulls Advisory number: CSSA-2001-SCO.39 Issue date: 2001 December 10 Cross reference: 1. Problem Description The...
CVE-2001-0214
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte...
CVE-2001-0215
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte...
Microsoft Windows Server 2000 - Debug Registers
// source: https://www.securityfocus.com/bid/2764/info A vulnerability exists in the handling of debug registers in Windows 2000. It is possible for unprivileged processes to create breakpoints for arbitrary processes. This can be used to 'kill' arbitrary processes without administrative...
Microsoft Windows Server 2000 - Debug Registers
Microsoft Windows Server 2000 - Debug Registers // source: https://www.securityfocus.com/bid/2764/info A vulnerability exists in the handling of debug registers in Windows 2000. It is possible for unprivileged processes to create breakpoints for arbitrary processes. This can be used to 'kill'...
WFTPD 3.0 - RETR CWD Remote Buffer Overflow
WFTPD 3.0 - RETR CWD Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2644/info Invalid long strings submitted using either 'RETR' or 'CWD' commands to a host running WFTPD server, will result in the service terminating due to a buffer overflow. It may be possible for an attack...
602Pro Lan Suite Denial Of Service
This problem was found with Version 2000A build 2000.1.0.35 latest version. The problem is effective locally and remotely on NT-4 and Windows 98.I haven't tested others. I dont have anything fancy to say about it really. Just somthing that was overlooked by the developers as was the last problem...
Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service
Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaem...
Alt-N MDaemon 3.5.6/5.0.7/6.x - IMAP Denial of Service
source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaemon will refuse any new connections to the IMAP servic...
APC UPS 3.7.2 - 'apcupsd' Local Denial of Service
/ Local Denial of Service for any linux box running APCUPSD v3.7.2 APCUPSD has his pid file world writeable, therefore it is possible to let it kill another pid and create a denial of service against any running daemon. when the apcupsd is stopped, for example Bug discovered by: Mattias Dartsch...
CVE-2000-0880
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file...
CVE-2000-0880
The CVE-2000-0880 entry concerns LPPlus creating the lpdprocess file with world-writable permissions, which allows local users to kill arbitrary processes by specifying a process ID and using the setuid dcclpdshut program to terminate the specified process. Impact is local access and partial inte...
CVE-2000-0273
Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0273
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...
Cisco Security Advisory: Cisco Secure PIX Firewall TCP Reset Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall TCP Reset Vulnerability Revision 1.0 For Public Release 2000 July 11 06:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary ======= The Cisco Secure PIX Firewall cannot distinguish...