2435 matches found
Network Associates Gauntlet Firewall 5.0 - Denial of Service
Network Associates Gauntlet Firewall 5.0 - Denial of Service // source: https://www.securityfocus.com/bid/556/info There is a vulnerability in Gauntlet Firewall 5.0 which allows an attacker to remotely cause a denial of service. The vulnerability occurs because Gauntlet Firewall cannot handle a...
Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal
Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal source: https://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that...
Qbik WinGate 3.0 - Registry
// source: https://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include "stdafx.h" include include mainint argc, char argv...
DataLynx suGuard 1.0 - Local Privilege Escalation
DataLynx suGuard 1.0 - Local Privilege Escalation source: https://www.securityfocus.com/bid/186/info A vulnerability exists within the DataLynx's suGuard program which allows a local attacker to gain administrative privilege by exploiting poor use of the /tmp directory and poor programming...
CVE-1999-0496
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin...
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation source: https://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash !...
