7710 matches found
IBM Lotus Domino ?open Forced Directory Listing
It is possible to browse the remote web server directories by appending '?open' to the end of the URL. For example : http://www.example.com/?open Data that can be accessed by unauthorized users may include usernames, server names and IP addresses, dial-up server phone numbers, administration logs...
Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (2)
Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...
Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (1)
Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...
CVE-1999-0712
A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...
PT-1999-1292 · Caldera · Caldera Open Administration System
Name of the Vulnerable Software and Affected Versions: Caldera Open Administration System COAS affected versions not specified Description: A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable. Recommendations: At the moment,...
CVE-1999-0221
Denial of service of Ascend routers through port 150 remote administration...
PT-1999-1015 · Ascend · Ascend Routers
Name of the Vulnerable Software and Affected Versions: Ascend routers affected versions not specified Description: The issue allows for a denial of service of Ascend routers through port 150, which is used for remote administration. Recommendations: At the moment, there is no information about a...
PT-1999-1118 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HP-UX affected versions not specified Description: A local privilege escalation issue exists in HP-UX, specifically affecting MC/ServiceGuard and MC/LockManager, where local users can exploit the Security Administration Manager SAM to gain...
CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...
Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration
source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...
Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration
Microsoft IIS 4 Windows NT - Remote Web-Based Administration source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy...
Microsoft Zero Administration Kit (ZAK) 1.0 Office97 - Backdoor Access
Microsoft Zero Administration Kit ZAK 1.0 Office97 - Backdoor Access source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and...
Microsoft Zero Administration Kit (ZAK) 1.0 / Office97 - Backdoor Access
source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and system functions. In an instance where the end-user is not allowed to...
Microsoft IIS 3.04.0 - Upgrade BDIR.HTR
Microsoft IIS 3.04.0 - Upgrade BDIR.HTR source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts...
CVE-1999-1292
Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL...
Metainfo Sendmail 2.02.5 MetaIP 3.1 - Upload Execute Read Scripts
Metainfo Sendmail 2.02.5 MetaIP 3.1 - Upload Execute Read Scripts source: https://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and...
Cisco IOS Web Administration Denial of Service
Advisory ID Internal CORE-22510 Bugtraq ID: 1838 CVE Name: None currently assigned. Title: Cisco IOS Web Administration Denial of Service Class: Denial of Service Remotely Exploitable: Yes Locally Exploitable: Yes Vulnerability Description: The HTTP service facility in the Cisco IOS provides remo...
Kerio Personal Firewall Replay Attack and Buffer Overflow
Advisory ID Internal CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Names: CAN-2003-0219, CAN-2003-0220 Title: Kerio Personal Firewall Replay Attack and Buffer Overflow Class: Design Error; Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted...
Remotely exploitable Buffer overflows and Authentication bypassing bugs on Linksys BEFW11S4 Wireless router and other devices.
Advisory ID Internal CORE-221005 Bugtraq ID: 6301, 6303, 6304, 6208, 6201, 6090 CVE Name: None currently assigned. Title: Remotely exploitable Buffer overflows and Authentication bypassing bugs on Linksys BEFW11S4 Wireless router and other devices. Class: Implementation flaws Remotely Exploitable...
