7710 matches found
CVE-2000-0937
Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...
CVE-2000-0935
Samba Web Administration Tool SWAT in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file...
CVE-2000-0936
Samba Web Administration Tool SWAT in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords...
Possible DOS on MDConfig (MDaemon)
MDaemon mail server for Windows comes with a utility called MDConfig to remotely administer a MDaemon server. To establish MDConfig connection to a MDaemon server, an administrator must enable MDConfig server on the server machine. Connection will be established on a predefined TCP port, by defau...
CVE-2000-1038
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request...
Cisco 675 Denial of Service Attack
OK, since everyone is up-in-arms over vendor notification and their response times, here's an example of what happens if you give a vendor too -much- time. ----------------- Title : Cisco 675 Web Administration Denial of Service Device: Cisco 675 DSL Router Class : Denial of Service remote Vendor...
CVE-2000-0939
Samba Web Administration Tool SWAT in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart...
Nokia firewalls
Hi, Well I just unwrapped my shiny new Nokia IP440 integrated Firewall-1/IDS appliance and thought to give it a once over. It appears to be a older fBSD kernel + some firewall checkpoint 4.1 + some IDS ISS + remote admin SSH/http. Now these vulnerabilities all require an authenticated user,...
Дырка в фаерволах Nokia
Переполнение буфера в утилите удаленного администрирования...
602Pro Lan Suite Web Admin Overflow
Strumpf Noir Society Advisories ! Public release ! -- -= 602Pro Lan Suite Web Administration Overflow =- Release date: Wednesday, November 22, 2000 Introduction: Lan Suite is an cost-effective all-in-one application providing connection sharing, email and fax services for networks. It offers remo...
Дырка в 602Pro Lan Suite
Переполнение буфера при HTTP-GET запросе в библиотеке удаленного администрирования...
Possible Watchguard Firebox II DoS
Hi, i've recently played with the Watchguard Firebox II firewall and discovered a nasty behaviour. Launching a simple connect flooder against the ftp proxy of the firewall i haven't tested other services the port hangs and so do all other services also the watchguard remote administration daemon,...
Дырка в VolanoChatPro
Пароли администрирования хранятся в доступном для пользователей месте...
Samba 2.0.7 - SWAT Symlink (1)
Samba 2.0.7 - SWAT Symlink 1 // source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes als...
Samba 2.0.7 - SWAT Symlink (2)
source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManager ...
[CORE SDI ADVISORY] Cisco IOS HTTP server DoS
CORE SDI http://www.core-sdi.com Vulnerability Report For Cisco IOS Web Administration DoS Date Published: 2000-10-25 Advisory ID: CORE-20002510 Bugtraq ID: 1838 CVE CAN: None currently assigned. Title: Cisco IOS Web Administration Denial of Service Class: Denial of Service Remotely Exploitable:...
Cisco Virtual Central Office 4000 (VCO4K) 5.1.3 - Remote Username Password Retrieval
Cisco Virtual Central Office 4000 VCO4K 5.1.3 - Remote Username Password Retrieval source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and...
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...