6347 matches found
CVE-1999-0757
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates...
Nortel CES (3DES version) offers false sense of security when using IPSEC
Short summary: Nortel Networks Contivity Extranet Switch CES has a weakness in it's IPSEC key exchange when using 3DES encryption. The 3DES encryption keys are encrypted using single DES during initial key exchange thus reducing cryptographic strength to 56-bit DES level. The weakness affects bot...
Remote vulnerability in gnuserv/XEmacs
SUMMARY All currently available versions of gnuserv for unix prior to 3.12 are vulnerable to remote exploit due to a buffer overflow and weak security. Gnuserv is a remote control facility for Emacsen. Gnuserv ships with XEmacs but is also available stand-alone from various sources for use with G...
CVE-2001-0088
common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog...
CVE-2001-0101: Undefined Security Weakness
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command...
Linux Kernel 2.2 (TCP/IP Weakness) Exploit
Exploit for linux platform in category remote exploits ========================================== Linux Kernel 2.2 TCP/IP Weakness Exploit ========================================== / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE ...
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...
CVE-2000-0528: Undefined Security Weakness
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...
CVE-2000-0225: Undefined Security Weakness
The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled...
CVE-2000-0792: Undefined Security Weakness
Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...
CVE-2000-0793: Undefined Security Weakness
Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system...
Bypassing Inherited Rights Filters in Novell Directory Services.
FOGHORN SECURITY ADVISORY issued September 7, 2000 http://www.foghornsecurity.com/advisories/20000907 Bypassing Inherited Rights Filters in Novell Directory Services. SUMMARY A design weakness in NDS as shipped with Novell v5.0 and later can allow certain users to bypass IRF's, and gain escalatio...
CVE-2000-0379: Undefined Security Weakness
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...
Microsoft Windows SMB Registry : SFCDisable Key Permission Weakness
The registry key HKLM\SOFTWARE\Microsoft\Windows NT\WinLogon\SFCDisable has its value set to a value other than 0 or 4. Any value other than 0 or 4 disables the Windows File Protection, which allows any user on the remote host to view / modify any file he wants. This probably means that this host...
CVE-1999-0142: Undefined Security Weakness
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...
CVE-1999-0819: Undefined Security Weakness
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it...
Microsoft Windows SMB Registry : Key Permission Weakness Admin Privilege Escalation
The following keys contain the name of the program that shall be started when the computer starts. The users who have the right to modify them can easily make the admin run a Trojan program that will give them admin privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Windows SMB Registry : Schedule Key Permission Weakness Local Privilege Escalation
The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2000-0364: Undefined Security Weakness
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...