6250 matches found
CVE-2005-1247
webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability...
IBM Directory Server 4.1 Web Admin Gui (ldacgi.exe) XSS Vulnerability
IBM Directory Server 4.1 Web Admin Gui ldacgi.exe XSS Vulnerability ===================================================================== During the audit of 3rd party product, based on IBM Directory Server, i found a cross site scripting vulnerability on IBM's Directory Server 4.1 Web Admin Gui...
Multiple bugzilla bugs
Multiple bugs are fixed during audit...
mah-jong[v1.4]: server/client remote buffer overflow exploit.
did an audit of mah-jong after seeing something about a debian advisory...the bugs found weren't mentioned, but were fixed in the overall giant patch for mah-jong, which is provided on debian's website1.4-2 patch. anyways, here is an exploit for the bugs found. original reference:...
gtkftpd[v1.0.4(and below)]: remote root buffer overflow exploit.
basic audit of gtkftpd; buffer overflow exists in the "LIST" command, in conjunction with a large file or directory namedoesn't account for the prefix to the buffer to exceed 256 bytes. this is explained in more detial in the exploit comment header. all purpose brute force exploit original exploi...
Gopherd <= 3.0.5 FTP Gateway Remote Overflow Exploit
Exploit for linux platform in category remote exploits ==================================================== Gopherd root 1 Dec 31 23:59 " to exploit this, there needs to be...
UMN gopherd[2.x.x/3.x.x]: ftp gateway, and GSisText() buffer overflow exploits.
bordom/fun audit time... been awhile since i did an audit of UMNUniversity of Minnesota gopherd+ daemon. figured i would check out the newer v3.0.x series, which has cleaned up the past security issues... while the old issues are resolved, still a few leftovers. two exploits follow... original...
University of Minnesota Gopherd 2.0.x2.33.0.x - GSisText Buffer Overflow
University of Minnesota Gopherd 2.0.x2.33.0.x - GSisText Buffer Overflow // source: https://www.securityfocus.com/bid/8168/info It has been reported that there is a buffer overflow condition present in gopherd that may be exploited remotely to execute arbitrary code. The affected component is sai...
[LSD] HP-UX security vulnerabilities
Hello, In this letter you will find the result of a brief security audit that we did some time ago for HP-UX platform. We have found 8 vulnerabilities seven local and a remote one. Technical details about all of the vulnerabilities were sent to the HP security team few months ago and in all cases...
EEYE: XDR Integer Overflow
XDR Integer Overflow Release Date: March 19, 2003 Severity: High Remote Code Execution/Denial of Service Systems Affected: Sun Microsystems Network Services Library libnsl BSD-derived libraries with XDR/RPC routines libc GNU C library with sunrpc glibc Description: XDR is a standard for the...
Pastel Accounting audit bypass
Accounting file may be directly edited...
Critical: Red Hat Security Advisory: openldap security update
Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...
DSA-212 mysql - multiple problems
Bulletin has no description...
Alcatel Operating System (AOS) does not require a password for accessing the telnet server
Overview The OmniSwitch 7700/7800 running Alcatel Operating System AOS version 5.1.1 has TCP port 6778 listening as a telnet server. This gives anyone access to the OmniSwitch's Vx-Works operating system without requiring a password. Description During an NMAP audit of the AOS 5.1.1 code that run...
Apache 1.3.26
I recently did a very brief and non-exhaustive security audit of Apache 1.3.26, and noticed some small potential bugs in some of the helper programs that come with the distribution. Apache maintainers have been notified, and the most serious of these bugs have been fixed in 1.3.27. I'm sending th...
alya.cgi CGI Backdoor Detection
alya.cgi was found on the remote system. This script is likely a CGI based backdoor distributed with multiple rootkits. This script was written by Jason Lidow Changes by Tenable: - Overhauled description, added Synopsis/Reference/Solution 12/8/2008 include"compat.inc"; if description scriptid1111...
Tiny Personal Firewall DoS
DoS against audit subsystem on large amount of audit info, problem hadling spoofed packets with IP's from FW itself...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
PT-2002-1747 · Microsoft · Windows 2000 +1
Name of the Vulnerable Software and Affected Versions: Windows NT versions prior to 4.0 SP3 Windows 2000 versions prior to SP3 Description: The issue allows local attackers to hide file usage activities by creating a hard link to the target file. This causes the link to be recorded in the audit...