Veritas NetBackup - Remote Command Execution (Metasploit)

$Id: veritasnetbackupcmdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2002-1389

CVE-2002-1389 describes a buffer overflow in typespeed versions 0.4.2 and earlier that lets a local user gain privileges via long input. The Debian advisory DSA-217-1 notes a fix; OpenVAS/NVD entries corroborate a local-privilege escalation issue caused by overflowing a buffer. The available conn...

CVE-2002-1389

Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input...

CVE-2002-1389

Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input...

CVE-2003-1389

RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks...

CVE-2002-1389

Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input...

CVE-2001-1389

Concrete details from connected sources show that CVE-2001-1389 affects xinetd up to version 2.3.3, with remote code execution and denial-of-service possibilities caused by buffer overflows and improper NULL termination. The Mandrake advisory confirms patches were applied in the 2.3.1 release, in...

CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...

CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay (versions 3.6.22–3.7.24) has a flaw in the port set host prompt access control. When the hostname is entered twice at the host: prompt, access filters can be bypassed, potentially allowing unauthorized access. The CVSS v2 base score is 7.5 (...

CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...