6347 matches found
CVE-1999-0703: Undefined Security Weakness
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
CVE-1999-0714: Undefined Security Weakness
Vulnerability in Compaq Tru64 UNIX edauth command...
CVE-1999-0690: Undefined Security Weakness
HP CDE program includes the current directory in root's PATH variable...
CVE-1999-0886: Undefined Security Weakness
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager...
CVE-1999-0809: Undefined Security Weakness
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed"...
Avirt Gateway Suite 3.3/3.3 a/3.5 - Directory Creation
source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to create a directory in the server's local filesystem...
Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation
Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to...
IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password
IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password source: https://www.securityfocus.com/bid/1763/info IBM WebSphere ships with a tool called 'ikeyman' that encrypts server certificates/key pairs when the IBM HTTP Server and SSL connections are enabled. Ikeyman stores the password in a stash...
FTP client/server and listen() implementation
Here is exploit. It works as described in NAI 1996 bulletin http://www.nai.com/nailabs/aspset/advisory/ftp-paper.asp but.... there are two points i'm disagree with NAI. 1. ftp console client under FreeBSD 2.2.x IS vulnerable 2. Inspite I don't treat FTP as secured protocol IMHO it's OS/software...
CVE-1999-0326: Undefined Security Weakness
Vulnerability in HP-UX mediainit program...
CVE-1999-0070: Undefined Security Weakness
test-cgi program allows an attacker to list files on the server...
CVE-1999-0472: Undefined Security Weakness
The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it...
MacOS_encryption.txt
Subject: MacOS system encryption algorithm To: [email protected] The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and depends on Users & Group...
DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow
DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode =...
sun-encryption-weak.txt
Date: Thu, 14 Jan 1999 23:15:55 -0500 From: spoon To: [email protected] Subject: sun "encryption" lameness I was checking out my new fangled desktop in solaris 7. or 2.7 what ever they are calling it, and i Stumbled across a buttion that said "Encrypt file". I was like shit... I took a swig fr...
SAFER+attack.txt
Date: Wed, 30 Dec 1998 01:41:59 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Academic Attacks on SAFER+ Forwarded From: "Jay D. Dyson" Originally From: John Kelsey I believe I have found two attacks on the SAFER+ version with 256-bit keys. While these attacks aren't practical, they...
embedded-controllers.txt
Date: Fri, 11 Dec 1998 10:45:46 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Security Advisory: ICMP Redirects Against Embedded Controllers -----BEGIN PGP SIGNED MESSAGE----- ISS Security Advisory December 10, 1998 ICMP Redirects Against Embedded Controllers WARNIN...
bmc.patrol.agent.txt
Date: Fri, 9 Apr 1999 12:46:33 +0200 From: fcosta To: [email protected] Subject: Patrol security bugs / / / / / / Security Department / / / Tel : +33 01 41 91 39 00 / / // / Fax : +33 01 41 91 39 99 / / / Patrol Security bugs report PROBLEM: The PATROL management software from BMC SOFTWARE has...
Microsoft Windows 95/98 Internet Explorer 5/Telnet - Local Heap Overflow
// source: https://www.securityfocus.com/bid/586/info Windows 95 and 98 systems running IE4 or specific versions of IE5 5.00.2314.1003 and 5.00.2314.1003IC are susceptible to a remote vulnerability that allows the execution of arbitrary code on a target that views a malicious web page. This...
