Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. Date published : 2002-03-09 http://marc.info/?l=bugtraq&m=87602167418931&w=2 http://marc.info/?l=bugtraq&m=88536273725787&w=2
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter. Date published : 2002-03-09 http://www.cert.org/vendor_bulletins/VB-96.05.dec http://ciac.llnl.gov/ciac/bulletins/g-18.shtml
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times....
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits,...
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user. Date published : 2002-03-09 http://marc.info/?l=bugtraq&m=87602167420184&w=2...
Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing. Date published : 2002-03-09 http://www.cert.org/advisories/CA-1995-03.html http://www.ciac.org/ciac/bulletins/f-12.shtml
Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue." Date published : 2002-03-09 http://marc.info/?l=bugtraq&m=88480839506155&w=2...
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page. Date published : 2002-03-09...
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files. Date published...
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting...
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an...
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. Date published :...
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands. Date published : 2002-03-09 http://www.securityfocus.com/bid/36 http://www.cert.org/advisories/CA-1992-04.html
VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command. Date published : 2002-03-09 http://www.securityfocus.com/bid/12 http://www.cert.org/advisories/CA-1990-07.html