CVE-1999-1104

Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...

CVE-1999-1530: Undefined Security Weakness

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system...

CVE-1999-1115: Undefined Security Weakness

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

CVE-2001-0935: Undefined Security Weakness

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550...

DistCC Daemon Command Execution

This module uses a documented security weakness to execute arbitrary commands on any system running distccd. Module Options msf use exploit/unix/misc/distcc/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf...

DistCC Daemon - Command Execution (Metasploit)

DistCC Daemon - Command Execution Metasploit $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Legato Networker vulnerability

There's a weakness in the authentification scheme of Legato Networker Software prior to version 6.1. When a client contacts the server, it announces in clear text via RPC his hostname or ip adress , his username and the user's groups. Then the server tries to resolve the ip adress of the machine...

3Com OfficeConnect DSL Router 812 1.1.7/840 1.1.7 - HTTP Port Router Denial of Service

// source: https://www.securityfocus.com/bid/2721/info OfficeConnect 812 is a DSL router manufactured by 3Com, and distributed by numerous DSL providers. OfficeConnect 812 is an integrated ADSL router with an onboard 4 port switch. A problem in the firmware included with this router could allow a...

CVE-1999-1213: Undefined Security Weakness

Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service...

CVE-1999-1370: Undefined Security Weakness

The setup wizard ie5setup.exe for Internet Explorer 5.0 disables 1 the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and 2 the Task Scheduler Service, which might prevent the scheduled execution of...

CVE-1999-1264: Undefined Security Weakness

WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled...

suse: sdbsearch.cgi vulnerability

Hello, I found weakness in sdbsearch.cgi script which is a part of Suse distribution. This is perl script and since Suse 7.1 they have introduced some form of protection interpreter is called with tainting checking. However, I think it isn't enough and this bug still may produce danger...

Проблемы с генерацией псевдо-случайных чисел в OpenSSL (pseudo random generator weakness)

Можно воссоздать состояние генератора псевдо-случайных чисел...

OpenSSL Security Advisory: PRNG weakness in versions up to 0.9.6a

OpenSSL Security Advisory 10 July 2001 WEAKNESS OF THE OpenSSL PRNG IN VERSIONS UP TO OpenSSL 0.9.6a ------------------------------------------------------------- CONTENTS: - Synopsis - Detailed problem description - Solution - Impact - Source code patch - Acknowledgement OpenSSL 0.9.6b has been...

CVE-2001-0431: Undefined Security Weakness

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

CVE-2000-0348: Undefined Security Weakness

A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges...

CVE-2001-0081: Undefined Security Weakness

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...

FreeBSD-SA-01:39.tcp-isn

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:39 Security Advisory FreeBSD, Inc. Topic: TCP initial sequence number generation contains statistical vulnerability Category: core Module: kernel Announced: 2001-05-02...

Дырка в ConsoleServer (login weakness, information gethering)

В telnet не ограничено число попыток ввода пароля, Через административное подключение до логина можно узнать важную информацию о системе...

Multiple TCP/IP implementations may use statistically predictable initial sequence numbers

Overview Attacks against TCP initial sequence number generation have been discussed for some time now. It has long been recognized that the ability to know or predict ISNs can lead to TCP connection hijacking or spoofing. What was not previously illustrated was just how predictable one...