ftp-vsftpd-backdoor NSE Script

Tests for the presence of the vsFTPd 2.3.4 backdoor reported on 2011-07-04 CVE-2011-2523. This script attempts to exploit the backdoor using the innocuous id command by default, but that can be changed with the exploit.cmd or ftp-vsftpd-backdoor.cmd script arguments. References: Script Arguments...

CVE-2011-2523

creationtimestamp| type| source ---|---|--- 2011-07-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17491 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/vsftpd234backdoor.rb 2019-11-28 00:31:21+00:00| seen|...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Fedora Update for mipv6-daemon FEDORA-2010-11143

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mipv6-daemon-0.4-5.fc13 (2010-11152)

This update fixes two security problems in mipv6-daemon: I CVE-2010-2522: The origin of netlink messages sent to mipv6-daemon was not verified, allowing for local users to spoof netlink messages and thus influence the behaviour of mipv6-daemon. II CVE-2010-2523: A specially crafted...

CVE-2010-2523

CVE-2010-2523 analyzes a vulnerability in the mipv6d (UMIP 0.4) daemon, where multiple buffer overflows in ha.c can be triggered by crafted ND_OPT_PREFIX_INFORMATION or ND_OPT_HOME_AGENT_INFO packets. Affected product: mipv6d within UMIP 0.4. Root cause: buffer overflows in ha.c when processing s...

CVE-2009-2523

CVE-2009-2523 affects Microsoft Windows 2000 SP4 License Logging Server (llssrv.exe). The vulnerability is a remote code execution via a heap-based buffer overflow in the LlsrLicenseRequestW RPC handler when processing an RPC string that lacks a terminating null. Exploitation is unauthenticated a...

MS Windows License Logging Server Remote Code Execution Vulnerability (974783)

This host is missing a critical security update according to Microsoft Bulletin MS09-064. OpenVAS Vulnerability Test $Id: secpodms09-064.nasl 5363 2017-02-20 13:07:22Z cfi $ MS Windows License Logging Server Remote Code Execution Vulnerability 974783 Authors: Antu Sanadi Copyright: Copyright c 20...

MS09-064: Vulnerability in the License Logging Service (974783)

The remote version of Windows contains a flaw in the Logging Service that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed packet to the remote logging service, and would be able to either execute arbitrary code o...

CVE-2008-2523

SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-2523

CVE-2008-2523 describes an SQL injection in the Autopatcher server plugin of RakNet prior to 3.23. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with impact described as partial confidentiality, integrity, and availability. The connected docu...

CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions NULL security descriptor for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before...

CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and CA Threat Manager r8 contain a local stack-based buffer overflow in InoCore.dll triggered by modifying a NULL-security-descriptor Task Service file mapping (InoTask.exe) via a crafted path. This allows a local attacker to gain SYSTEM-level privileges. The i...

CVE-2006-2523

PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the Language cookie...

CVE-2006-2523

The CVE-2006-2523 entry details a PHP remote file inclusion in phpListPro 2.0.1 and earlier, caused by improper handling of the Language cookie when magic_quotes_gpc is disabled. This allows an attacker to execute arbitrary PHP code by providing a malicious URL in the Language cookie. The affecte...

CVE-2004-2523

OpenFTPD affected: OpenFTPD 0.30.2 and earlier. The vulnerability is a format string flaw in the SITE MSG command’s msg.c (cat_message) that lets remote authenticated users execute arbitrary code via format specifiers in the message argument. This is a remote code execution risk with authenticati...

CVE-2005-2523

CVE-2005-2523 concerns multiple XSS vulnerabilities in Mac OS X 10.4 Weblog Server (Mac OS X Server 10.4 to 10.4.2). The flaw affects the Weblog Server component and allows remote attackers to inject arbitrary script via weblog comments; root cause is incomplete input filtering. Impact described ...

[Full-disclosure] Apple Mac Tiger 10.4 weblog server

------------------------------------------------------------ - EXPL-A-2005-010 exploitlabs.com Advisory 039 - ------------------------------------------------------------ - Mac OSX Server weblog - AFFECTED PRODUCTS ================= Mac OSX 10.4.0 Weblog Server http://apple.com OVERVIEW ========...

CVE-2004-2523

Format string vulnerability in the msg command catmessage function in msg.c in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument...