Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service

Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service source: https://www.securityfocus.com/bid/5902/info Oracle 9i Application Server 9iAS allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. Whe...

Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service

source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of administrative tasks, including full remote access to the user's...

Переполнение буфера в iPlanet Messaging Server (buffer overflow)

Переполнение буфера при разборе имени пользователя в утилите удаленного администрирования...

SiteWare 2.53.03.1 Editor Desktop - Directory Traversal

SiteWare 2.53.03.1 Editor Desktop - Directory Traversal source: https://www.securityfocus.com/bid/2868/info Screaming Media is a provider for custom web content. SiteWare Editor Desktop is the web-based administration tool for managing Screaming Media content. SiteWare Editor Desktop is prone to...

CVE-2000-0936

Samba Web Administration Tool SWAT in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords...

CVE-2000-0937

Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...

CVE-2000-0935

Samba Web Administration Tool SWAT in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file...

CVE-2000-0938

Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...

Samba Web Administration Tool (SWAT) Error Message Username Enumeration

The remote SWAT server replies with different error codes when it is issued a bad user name or a bad password. An attacker may use this flaw to obtain the list of user names of the remote host by a brute-force attack. As SWAT does not log login attempts, an attacker may use this flaw even more...

CVE-2000-0939

Samba Web Administration Tool SWAT in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart...

CVE-2000-0938

Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...

CVE-2000-0937

Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...

CVE-2000-0935

Samba Web Administration Tool SWAT in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file...

CVE-2000-0936

Samba Web Administration Tool SWAT in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords...

CVE-2000-0939

Samba Web Administration Tool SWAT in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart...

Samba 2.0.7 - SWAT Symlink (1)

Samba 2.0.7 - SWAT Symlink 1 // source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes als...

LinuxConf Detection

The remote host is running LinuxConf, a web-based administration tool for Linux. It is suggested to not allow anyone to connect to this service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10135; scriptversion"1.23"; scriptcvsdate"Date: 2019/11/22";...

NetBus 2.x Software Detection

NetBus 2.x is installed. NetBus is a remote administration tool that can be used for malicious purposes, such as sniffing what the user is typing, its passwords and so on. An attacker may have installed it to control hosts on your network. Furthermore, Netbus authentication may be bypassed. C...

netbus.1.x.DoS.txt

Date: Mon, 22 Feb 1999 22:43:56 +0100 From: Daniel Rosowski To: [email protected] Subject: NetBus client 1.x overflow Hello all you bugtraq"ers" out there, I don't know if this is already known, if so please excuse my post. When I was experimenting with the remote administration tool NetBus 1....