6894 matches found
Internet Software Solutions Air Messenger LAN Server 3.4.2 - Full Path Disclosure
source: https://www.securityfocus.com/bid/2881/info Air Messenger LAN Server for Microsoft Windows allows users to exchange phone, pager and email messages through a Web gateway. The path to sensitive files used by AMLServer can be easily obtained by any remote user, simply by examining the...
[SNS Advisory No.30] Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication
SNS Advisory No.30 Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication Problem first discovered: 24 May 2001 Published: 12 Jun 2001 Last Updated:12 Jun 2001 ----------------------------------------------------------------------- Overview --------- It is...
Trend Micro Interscan VirusWall for Windows NT 3.51 - Configurations Modification
source: https://www.securityfocus.com/bid/2859/info A remote user could utilize the administrator functions of Interscan Viruswall without providing authentication credentials. This may allow the user to make configuration changes when submitting specially crafted URLs to the host...
XFree86 X11R6 3.3.2 XMan - ManPath Environment Variable Buffer Overflow
XFree86 X11R6 3.3.2 XMan - ManPath Environment Variable Buffer Overflow source: https://www.securityfocus.com/bid/3030/info xman is a component included with the XFree86 Window System. A buffer overflow in the handling of the MANPATH environment variable by xman makes it possible for a local user...
CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service kernel panic by 1 creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or 2 calling dup2 on a file descriptor in one process, then setting the descriptor to NU...
CVE-2001-1335
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users such as anonymous to read arbitrary files via a GET with a filename that contains a ...%5c modified dot dot...
Check Point FireWall-1 HTTP Client Authentication Detection
The Check Point FireWall-1 Client Authentication web server is used to authenticate a user via HTTP. Once authenticated, the user can get more privileges on the network ie: get access to hosts which were previously blocked by the firewall. C Tenable Network Security, Inc. include"compat.inc";...
Beck IPC GmbH IPC@CHIP - TelnetD Login Account Brute Force
Beck IPC GmbH IPC@CHIP - TelnetD Login Account Brute Force source: https://www.securityfocus.com/bid/2771/info The IPC@Chip is a single-chip embedded webserver from Beck GmbH. The device's inbuilt telnetd service may allow a remote user to repeatedly attempt to login to a given account, without...
CVE-2001-0170
glibc 2.1.9x and earlier does not properly clear the RESOLVHOSTCONF, HOSTALIASES, or RESOPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files...
CVE-2000-0650
The CVE-2000-0650 entry concerns VirusScan 4.5 and NetShield 4.5. Insecure permissions on the registry key identifying the AutoUpgrade directory could let a local user replace SETUP.EXE with a Trojan Horse to execute arbitrary commands. The report does not specify a patch or remediation, affected...
CVE-2001-0016
NTLM Security Support Provider NTLMSSP service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access...
CVE-2000-1121
Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument...
BRS Webweaver 0.x - FTP Root Full Path Disclosure
BRS Webweaver 0.x - FTP Root Full Path Disclosure source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By...
Vulnerability in WebXQ Server
----- Begin Hush Signed Message from [email protected] ----- Vulnerability in WebXQ Server Overview WebXQ v2.1.204 is a web server available from http://www.datawizard.net. A vulnerability exists which allows a remote user to break out of the ftp root. Details The following URL demonstrates t...
CVE-2001-1399
Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86."...
Samba 2.0.x - Insecure TMP File Symbolic Link
// source: https://www.securityfocus.com/bid/2617/info Samba is a flexible file sharing packaged maintained by the Samba development group. It provides interoperatability between UNIX and Microsoft Windows systems, permitting the sharing of files and printing services. A problem in the package...
Solaris 2.6 - FTP Core Dump Shadow Password Recovery
source: https://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying from desktop to enterprise server...
Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows
Trend Micro Interscan VirusWall Linux 3.0.1 - Multiple Program Buffer Overflows source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and...
CVE-2001-0170
glibc 2.1.9x and earlier does not properly clear the RESOLVHOSTCONF, HOSTALIASES, or RESOPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files...