CVE-2000-1030

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

I-gear 3.5.x for Microsoft Proxy logging vulnerability + temporary fix.

Hello everyone, this message is generated after several hours with Symantec Tech support and my personal research of the issue. The issue is confirmed to be a problem by Symantec® . Platform: I-gear 3.5.6 and 3.5.7-x for MSP Proxy 2.0 ; Windows NT 4.0 SP6; MSP 2.0 SP1; PowerEdge 2300 dual 450; 51...

CVE-1999-0407

CVE-1999-0407 affects Microsoft IIS 4.0. A default virtual directory /IISADMPWD contains files that can be used as proxies for brute-forcing credentials or identifying valid users. In Nessus data, these files (aexp2.htr, aexp2b.htr, aexp3.htr, aexp4.htr) can enable brute-force login attempts; one...

CVE-2000-0284

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands...

CVE-2000-0284

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands...

University of Washington - imap LSUB Buffer Overflow (Metasploit)

University of Washington - imap LSUB Buffer Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

University of Washington - imap LSUB Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'UoW IMAP...

True North Software Internet Anywhere Mail Server 3.1.3 - RETR Denial of Service

True North Software Internet Anywhere Mail Server 3.1.3 - RETR Denial of Service source: https://www.securityfocus.com/bid/982/info Submitting a RETR command with a message ID argument longer than 10 numeric characters will result in a crash of the Internet Anywhere Mail Server. A Doctor Watson...

True North Software Internet Anywhere Mail Server 3.1.3 - RETR Denial of Service

source: https://www.securityfocus.com/bid/982/info Submitting a RETR command with a message ID argument longer than 10 numeric characters will result in a crash of the Internet Anywhere Mail Server. A Doctor Watson error message will appear reporting an access violation by MailServer.exe...

CVE-1999-0990: Undefined Security Weakness

Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system...

CVE-1999-0656

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names...

CVE-1999-1266

rsh daemon rshd generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system...

PT-1997-1165 · Rusers · Rusers

Name of the Vulnerable Software and Affected Versions: rusers affected versions not specified Description: The issue exposes valid user information to any entity on the network due to a version of rusers being run. Recommendations: At the moment, there is no information about a newer version that...

ROS-2-3673

2.3673 Notification on the update of the Red OS OPERATIONAL SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

ROS-2-3403

2.3403 Notification on the update of the Red OS OPERATING SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

CVE-2022-4531

CVE-2022-4531 is rejected/not used and does not represent an active vulnerability entry.

ROS-2-4506

2.4506 Notification on the update of the Red OS OPERATION SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

ROS-2-6487

2.6487 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimally numbered RU.29926343.02.01-01. F...

ROS-2-5183

2.5183 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.12.2029 for the RED OS operating system, decimally numbered RU.29926343.02.01-01. For...