2461 matches found
Microsoft IIS 4.0/5.0 - Executable File Parsing
source: https://www.securityfocus.com/bid/1912/info When Microsoft IIS receives a valid request for an executable file, the filename is then passed onto the underlying operating system which executes the file. In the event that IIS receives a specially formed request for an executable file follow...
Nevis Systems All-Mail 1.1 - Remote Buffer Overflow
Nevis Systems All-Mail 1.1 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining...
Remote DoS for Mercur 3.2
/ Remote Denial of Service for Mercur 3.2 C |TDP| - HaCk-13 TeaM - 2000 [email protected] This code shows a Mercur 3.2 vulnerability in which, any remote user can cause server shutdown. Previous Mercur versions may be affected by this vulnerability. Greetings to all the other members and all my...
Mirabilis ICQ 2000.0 A - Mailclient Temporary Link
source: https://www.securityfocus.com/bid/1307/info While using ICQmailclient, the user creates a temporary internet link created in a default temporary directory, which remains even after the user signs out or closes ICQ. This link may be re-opened by another user, thus giving them full access t...
TalentSoft Web+ 4.x - Directory Traversal
source: https://www.securityfocus.com/bid/1102/info Web+ is an e-commerce server designed to run under a webserver, to provide web storefronts. The various scripts that are required to do this are specified to the webpsvr daemon via a 'script' variable passed to the webplus CGI. This CGI can be...
sendmail-x.x.x-DoS.txt
Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice // greetings to kotka : // ...and everyone who could stand this post Hello boys and girls - probably everyone yearn after me : So I decided to publish so...
Network Associates Gauntlet Firewall 5.0 - Denial of Service
Network Associates Gauntlet Firewall 5.0 - Denial of Service // source: https://www.securityfocus.com/bid/556/info There is a vulnerability in Gauntlet Firewall 5.0 which allows an attacker to remotely cause a denial of service. The vulnerability occurs because Gauntlet Firewall cannot handle a...
Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal
Qbik WinGate Standard 3.0.5 - Log Service Directory Traversal source: https://www.securityfocus.com/bid/507/info The WinGate log service is configured by default to only allow connections from 127.0.0.1, but can be set to allow connections from anywhere. Either way, there is a vulnerability that...
Qbik WinGate 3.0 - Registry
// source: https://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include "stdafx.h" include include mainint argc, char argv...
DataLynx suGuard 1.0 - Local Privilege Escalation
DataLynx suGuard 1.0 - Local Privilege Escalation source: https://www.securityfocus.com/bid/186/info A vulnerability exists within the DataLynx's suGuard program which allows a local attacker to gain administrative privilege by exploiting poor use of the /tmp directory and poor programming...
CVE-1999-0496
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin...
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation source: https://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash !...
