AIX 5.2 : IY42424

The remote host is missing AIX Critical Security Patch number IY42424 SECURITY: Native GSSAPI ftpd incorrectly authenticates. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Pavuk Digest - Authentication Remote Buffer Overflow

Pavuk Digest - Authentication Remote Buffer Overflow / exploit for pavuk web spider - infamous42md AT hotpop DOT com shouts to mitakeet, skullandcircle, and thanks to matt murphy for making me realize a n00bish mistake i made. this exploit probably deserves a bit of an explanation as it was not...

Pavuk Digest - Authentication Remote Buffer Overflow

/ exploit for pavuk web spider - infamous42md AT hotpop DOT com shouts to mitakeet, skullandcircle, and thanks to matt murphy for making me realize a n00bish mistake i made. this exploit probably deserves a bit of an explanation as it was not exactly straight forward. the vulnerable code looks li...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2003:079)

A vulnerability in Konqueror was discovered where it could inadvertently send authentication credentials to websites other than the intended site in clear text via the HTTP-referer header when authentication credentials are passed as part of a URL in the form http://user:password@host/. The...

RHEL 2.1 : vnc (RHSA-2002:287)

Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...

IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting

IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9773/info It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI...

iDEFENSE Security Advisory 02.04.04: GNU Radius Remote Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 02.04.04 GNU Radius Remote Denial of Service Vulnerability http://www.idefense.com/application/poi/display?id=71 February 4, 2004 I. BACKGROUND Radius is a server for remote user authentication and accounting. More informati...

racoon -- improper certificate handling

Thomas Walpuski noted when OpenSSL would detect an error condition for a peer certificate, racoon mistakenly ignored the error. This could allow five invalid certificate states to properly be used for authentication...

Surfnet 1.31 - Unauthorized Account Depositing

source: https://www.securityfocus.com/bid/9347/info Surfnet kiosks are prone to a vulnerability that may permit kiosk users to deposit extra time into kiosk accounts. This reportedly occurs when a user attempts to authenticate to the kiosk, causing their time to be doubled for each attempt...

Ebola AV Daemon < 0.1.5 Authentication Sequence Remote Overflow

According to its version number, there is a remote buffer overflow vulnerability in the authentication mechanism of the Ebola AntiVirus daemon. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Ref : From: "c0wboy@0x333...

CVE-2003-0745

SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server...

Spaiz-Nuke/PHP-nuke multiple bugs

SQL injection during authentication, SQL injection in web-link module, SQL injection in download module, access with encrypted password...

teapop SQL injection

SQL injection is possible during authentication if postgresql or mysql is used...

LSH 1.x - Remote Buffer Overflow (2)

LSH 1.x - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable...

Mac OS X LDAP plugins transmit user credentials in clear text

Overview Versions 10.2 and later of Apple's MacOS X operating system include support for the Lightweight Directory Access Protocol LDAP. A vulnerability in the way some of these versions of MacOS X handle authentication in certain environments could expose user's passwords in plaintext as they're...

Geeklog 1.3.x - (Authenticated) SQL Injection

source: https://www.securityfocus.com/bid/7742/info Geeklog is reported to be prone to SQL injection attacks during authentication. This is due to insufficient sanitization of cookie values, which could permit an attacker to inject SQL code. This issue could be exploited to compromise Geeklog or ...

S21SEC-020 - Vignette user enumeration

ID: S21SEC-020-en Title: Vignette user enumeration Date: 15/03/2003 Status: Vendor contacted and solution available Scope: Enumeration of user status Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-020-en.txt Release: External S 2 1 S E C http://www.s21sec.com...

Apple AirPort Base Station Authentication Credential Encryption Weakness

The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in cleartext although slightly obsfuscated. An attacker who has...

Kerio personal firewall multiple bugs

It's possible to fool ip filtering by using UDP/53 as a source port. Buffer overflow during authentication. Replay attacks during authentication...

ptnews.txt

PTNews v1.7.7 - Access to administrator functions without authentification .oO Overview Oo. PTNews v1.7.7 - Access to administrator functions without authentification Discovered on 2003, April, 7th Vendor: PTNews - http://www.openbg.net/ptsite/ PT News is a simple news system. This is lite soluti...