Lucene search
+L

1568 matches found

seebug.org
seebug.org
•added 2004/10/17 12:00 a.m.•39 views

Monit <= 4.2 Basic Authentication Remote Root Exploit

No description provided by source. / THE EYE ON SECURITY RESEARCH GROUP - INDIA http://www.eos-india.net/poc/305monit.c Remote Root Exploit for Monit = 4.2 Vulnerability: Buffer overflow in handling of Basic Authentication informations. Server authenticates clients through: Authentication: Basic...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2004/10/17 12:00 a.m.•35 views

Monit 4.2 - Basic Authentication Remote Code Execution

Monit 4.2 - Basic Authentication Remote Code Execution / THE EYE ON SECURITY RESEARCH GROUP - INDIA http://www.eos-india.net/poc/305monit.c Remote Root Exploit for Monit linuxmailorg - Abhisek Datta abhisekfrontru 06.04.2004 http://www.eos-india.net New Targets : RedHat 9 Fedora Core 2 Slackware...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2004/10/17 12:00 a.m.•66 views

Monit 4.2 - Basic Authentication Remote Code Execution

/ THE EYE ON SECURITY RESEARCH GROUP - INDIA http://www.eos-india.net/poc/305monit.c Remote Root Exploit for Monit linuxmailorg - Abhisek Datta abhisekfrontru 06.04.2004 http://www.eos-india.net New Targets : RedHat 9 Fedora Core 2 Slackware 8.1 Update Code :...

10CVSS5.8AI score0.16567EPSS
SaveExploits2
Apache Httpd
Apache Httpd
•added 2004/09/18 12:00 a.m.•55 views

Apache Httpd < 2.0.52 : Basic authentication bypass

A flaw in Apache 2.0.51 only broke the merging of the Satisfy directive which could result in access being granted to resources despite any configured authentication...

7.5CVSS1.6AI score0.07587EPSS
SaveExploits1Affected Software1
Cvelist
Cvelist
•added 2004/09/01 4:00 a.m.•39 views

CVE-2004-0009

Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user...

6.8AI score0.01166EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•6 views

CVE-2004-0009: Undefined Security Weakness

Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user...

7.5CVSS5.9AI score0.01166EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2004/08/18 12:00 a.m.•23 views

Icecast < 2.0.1 HTTP Basic Authentication Remote Overflow

Binary data 2137.prm...

5CVSS7.3AI score0.02085EPSS
SaveExploits0References1
OSV
OSV
•added 2004/07/27 4:00 a.m.•15 views

CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

7.7AI score
SaveExploits0References15
NVD
NVD
•added 2004/07/27 4:00 a.m.•34 views

CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

10CVSS7.7AI score0.29441EPSS
SaveExploits2References14
OSV
OSV
•added 2004/07/27 4:00 a.m.•13 views

DEBIAN-CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

10CVSS7.9AI score0.29441EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/07/23 12:00 a.m.•5 views

CVE-2004-0600: Undefined Security Weakness

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

10CVSS6.6AI score0.29441EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
•added 2004/07/22 11:02 a.m.•62 views

Important: Red Hat Security Advisory: samba security update

Updated samba packages that fix buffer overflows, as well as other various bugs, are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Evgeny Demidov discovered a flaw in the internal routine used by the Samba Web Administration Tool SWAT in Samba versions 3.0.2...

10CVSS7.9AI score0.29441EPSS
SaveExploits2References14
exploitpack
exploitpack
•added 2004/04/12 12:00 a.m.•39 views

Monit 4.2 - Remote Buffer Overflow

Monit 4.2 - Remote Buffer Overflow / THE EYE ON SECURITY RESEARCH GROUP - INDIA www eos-india net poc 305monit.c Remote Root Exploit for Monit include include include include define BUFFSIZE 2048 define PADDING 40 define EXPSIZE 256+4+PADDING define MAXARCH 2 struct eos char arch; unsigned long...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2004/04/12 12:00 a.m.•90 views

Monit 4.2 - Remote Buffer Overflow

/ THE EYE ON SECURITY RESEARCH GROUP - INDIA www eos-india net poc 305monit.c Remote Root Exploit for Monit include include include include define BUFFSIZE 2048 define PADDING 40 define EXPSIZE 256+4+PADDING define MAXARCH 2 struct eos char arch; unsigned long ret; targets = "Monit-4.2-Gentoo",...

5CVSS5.8AI score0.08671EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2004/04/11 12:00 a.m.•237 views

Web Server Incomplete Basic Authentication DoS (deprecated)

This plugin is no longer relevant, and may never have worked correctly. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/09/13. Deprecated by RES-74695. include"compat.inc"; ifdescription scriptid12200; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2004/04/11 12:00 a.m.•77 views

Web Server HTTP Basic Authorization Header Remote Overflow DoS

It was possible to kill the web server by sending a request with a long basic authentication field. A remote attacker may exploit this vulnerability to make the web server crash continually or even execute arbitrary code. C Tenable Network Security, Inc. Affected: Monit include"compat.inc"; if...

6AI score
SaveExploits0
securityvulns
securityvulns
•added 2004/04/06 12:00 a.m.•51 views

[VulnWatch] Advisory: Multiple Vulnerabilities in Monit

Multiple Vulnerabilities in Monit I. Product Description As quoted from http://www.tildeslash.com/monit/ web page: "monit is a utility for managing and monitoring, processes, files, directories and devices on a Unix system. Monit conducts automatic maintenance and repair and can execute meaningfu...

1.1AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2004/03/03 5:00 a.m.•26 views

CVE-2004-0009

Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user...

7.5CVSS6AI score0.01166EPSS
SaveExploits0References1
NVD
NVD
•added 2004/03/03 5:00 a.m.•26 views

CVE-2004-0009

Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user...

7.5CVSS6.9AI score0.01166EPSS
SaveExploits0References6
securityvulns
securityvulns
•added 2004/02/09 12:00 a.m.•45 views

ApacheSSL protection bypass

In basic authentication emulation mode it's possible to access server without certificate...

3.6AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder