kapda-450.txt

Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow Denial of Service PoC Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietn...

DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromis...

Authentication bypassing in Lotus Domino

By creating a specially crafted url, the authentication mechanism of Domino database can be circumvented. SPDX-FileCopyrightText: 2002 Davy Van De Moere Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

WebCalendar -- unauthorized access vulnerability

SecurityFocus reports that WebCalendar is affected by an unauthorized access vulnerability. The vulnerability is caused by improper checking of the authentication mechanism before access is being permitted to the "assistantedit.php" file...

CVE-2005-0198

A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...

WebArtFactory CMS Vulnerability

Quick Summary: Product : WebArtFactory CMS. Version : Several in-production old system versions. Vendor : WebArtFactory - http://www.webartfactory.com Class : Remote Criticality : High Operating Systems : N/A. Synopsis From the WebArtFactory webpage: "Somos una empresa de desarrollo de pginas web...

Microsoft Exchange Server 2003 fails to assign user credentials to proper mailbox

Overview A flaw in the authentication mechanism that Microsoft Exchange Server 2003 uses for Outlook Web Access users in some configurations could expose another user's mailbox. Description Outlook Web Access OWA is a feature of Microsoft Exchange Server 2003. By using OWA, a server that is runni...

WebArtFactory CMS Vulnerability

Quick Summary: Product : WebArtFactory CMS. Version : Several in-production old system versions. Vendor : WebArtFactory - http://www.webartfactory.com Class : Remote Criticality : High Operating Systems : N/A. Synopsis From the WebArtFactory webpage: "Somos una empresa de desarrollo de pginas web...

PLD Software Ebola 0.1.4 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/9156/info It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf to construct an error message when authentication is not...

[SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Webserver 4D v3.6 Weak Password Preservation Vulnerability -- - -- Type Design Error - -- Release Date September 25, 2002 - -- Product / Vendor Webserver 4D by MDG Computer Services, Inc. is an complete Web Server environment written entirely on t...

PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow

PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow // source: https://www.securityfocus.com/bid/2831/info TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew. A problem in the software package makes it possible for a remote us...

PKCrew TIAtunnel 0.9 alpha2 - Authentication Mechanism Buffer Overflow

// source: https://www.securityfocus.com/bid/2831/info TIAtunnel is a freely available IRC session bouncing software package. It is distributed by the pkcrew. A problem in the software package makes it possible for a remote user to gain a local shell. Due to a buffer overflow in the authenticatio...

CVE-1999-0791

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

CVE-1999-0791

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to ...

Samba 1.9.19 - Password Remote Buffer Overflow

Samba 1.9.19 - Password Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1816/info Samba is an open source software suite that provides seamless file and print services to SMB/CIFS clients. Certain older versions of Samba had a remotely exploitable buffer overflow vulnerability...