allmanage.pl.txt

Allmanage.pl vulnerability 13 may 2000 Websites using 'Allmanage Website Administration Software 2.6 WITH the upload ability', and maybe earlier versions , contain a vulnerability wich gives you full add/del/change access in the user-account directories and you can change the files in the main...

raq2.admin.exploit.txt

To replicate this bug you must have Site Administrator access to one of the accounts on the server. When you go into the Site Management for a site and select the User Management option, you get a list of the usernames that have been setup for that account. The green pencil edit icon is a command...

glFTPd 1.17.2 - Code Execution

source: https://www.securityfocus.com/bid/891/info GlFtpd is a popular alternative to the mainstream unix ftp daemons and is currently in wide use on the internet. There are three known serious vulnerabilities in GlFtpd. The first problem is an account which is created by default upon installatio...

CVE-1999-0310

SSH 1.2.25 on HP-UX allows access to new user accounts...

Wingate_Registry_sploit.txt

Problem: All of the wingate server settings are stored in "HKEYLOCALMACHINE\Sofware\Qbik Software\Wingate" This makes it possible for anyone with registry editing permissions remote or physical to change wingate settings. Details: With about 10 minutes of exploration of the wingate settings i was...

backoffice.installer.txt

Date: Thu, 18 Feb 1999 14:44:48 -0800 PST From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-030: Microsoft BackOffice Vulnerability For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ |...

CVE-1999-1138

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories 1 /tmp for the dos user, and 2 /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable...