5356 matches found
Design/Logic Flaw
Microsoft Internet Security and Acceleration ISA Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to...
Microsoft ISA Server Privilege Escalation Vulnerability (970953)
This host is missing a critical security update according to Microsoft Bulletin MS09-031. OpenVAS Vulnerability Test $Id: secpodms09-031.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft ISA Server Privilege Escalation Vulnerability 970953 Authors: Nikita MR Copyright Copyright c 2009 SecPod,...
CVE-2009-1135: Undefined Security Weakness
Microsoft Internet Security and Acceleration ISA Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to...
Microsoft ISA Server Privilege Escalation Vulnerability (970953)
This host is missing a critical security update according to Microsoft Bulletin MS09-031. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft ISA Server 2006 Radius OTP Bypass (MS09-031; CVE-2009-1135)
ISA Server, originating as Microsoft Proxy Server, is a Firewall & Security product that provides Application-Layer Firewalling, acts as a VPN endpoint, and provides Internet Access for client systems in a Business Networking environment. An elevation of privilege vulnerability exists in Microsof...
Netgear DG632 Router Authentication Bypass Vulnerability
Product Name: Netgear DG632 Router Vendor: http://www.netgear.com Date: 15 June, 2009 Author: [email protected] [email protected] Original URL: http://www.tomneaves.co.uk/NetgearDG632AuthenticationBypass.txt Discovered: 18 November, 2006 Disclosed: 15 June, 2009 I. DESCRIPTION The Netgear DG6...
Netgear DG632 Router Authentication Bypass Vulnerability
Exploit for hardware platform in category remote exploits ======================================================== Netgear DG632 Router Authentication Bypass Vulnerability ======================================================== Product Name: Netgear DG632 Router Vendor: http://www.netgear.com...
Microsoft Visual Studio 'MSCOMM32.OCX' ActiveX Control Heap Buffer Overflow Vulnerability
Description Microsoft Visual Studio is prone to a remote heap-based buffer-overflow vulnerability. Attackers may exploit this issue by enticing an unsuspecting victim to view a malicious webpage. Successful exploits will allow attackers to execute arbitrary code within the context of the affected...
Interlogy Profile Manager Basic - Insecure Cookie Handling
Interlogy Profile Manager Basic - Insecure Cookie Handling interlogy Profile Manager Basic for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 06/06/2009 Home: yildirimordulari.com / z0rlu.blogspot.com msn:...
Interlogy Profile Manager Basic Insecure Cookie
interlogy Profile Manager Basic for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 06/06/2009 Home: yildirimordulari.com / z0rlu.blogspot.com msn: [email protected] N0T: Kpss AnanI...
Solaris Update for Basic Registration Update 123005-07
Check for the Version of Basic Registration Update OpenVAS Vulnerability Test Solaris Update for Basic Registration Update 123005-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for Basic Registration Update 123005-07
Check for the Version of Basic Registration Update OpenVAS Vulnerability Test Solaris Update for Basic Registration Update 123005-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for Basic Registration Update 123006-07
Check for the Version of Basic Registration Update OpenVAS Vulnerability Test Solaris Update for Basic Registration Update 123006-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for Basic Registration Update 123006-07
Check for the Version of Basic Registration Update OpenVAS Vulnerability Test Solaris Update for Basic Registration Update 123006-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
httpdx <= 0.5b FTP Server (USER) Remote BOF Exploit (SEH)
No description provided by source. !/usr/bin/python Usage : httpdx.py targetip | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : httpdx = 0.5b FTP Server USER Remote BOF Exploit SEH Founder : sico2819 Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All friends &...
FreeBSD : Multiple Potential Buffer Overruns in Samba (2de14f7a-dad9-11d8-b59a-00061bc2ad93)
Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the 'mangling...
Geeklog 1.5.2 SQL Injection
= 5.0 google dorks: "By Geeklog" "Created this page in" +seconds +powered "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml vulnerability, see /publichtml/webservices/atom/index.php near lines 34-53: ... requireonce '../../lib-common.php'; if PHPVERSION 5...
Ftbbs7. 1 static GBK version 0day-vulnerability warning-the black bar safety net
conn. asp wood has done anti-injected into the, ftbbsmyinfo. asp and JB to an injection,a perfect match.. Posted on ftbbsmyinfo. asp source code: ASP/Visual Basic code 0 1.& lt;% 0 2. postuserid=request. QueryString”postuserid” 0 3. ftbbsuser=request. QueryString”ftbbsuser” 0 4. call FTBBSHTMLMBf...
BBC paid 'a few thousand dollars' for botnet
In a statement on Monday, the BBC said that its decision to purchase and use a botnet to espose the malware epidemic had been “in the public interest”. “It was not our intention to break the law,” the BBC told ZDNet UK on Monday. “There is a powerful public interest in demonstrating the ease with...
CVE-2008-6464: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...