Microsoft Internet Explorer 56 - Cross-Domain Event Leakage

Microsoft Internet Explorer 56 - Cross-Domain Event Leakage source: https://www.securityfocus.com/bid/9761/info Microsoft Internet Explorer is reported to be prone to an issue that may leak sensitive information across foreign domains. This issue could permit framesets in different domains to lea...

YAK! 2.1.0 still vulnerable

YAK! 2.1.0 still vulnerable =========================== for file transfer yak uses ftp mode. Yak! listens on port 3535 for file transfer in ftp mode. vulnerability in the previous version was, they were using constant username and pass combination for ftp login. 2.1.0 version seems to overcome th...

DEBIAN-CVE-2003-0489

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute...

CVE-2003-0489

CVE-2003-0489 applies to tcptraceroute 1.4 and earlier, where the program’s privilege-dropping after obtaining a file descriptor for raw packet capture is incomplete. Several connected sources document that a local attacker could potentially access the capture descriptor via a separate vulnerabil...

DSA-330 tcptraceroute - failure to drop root privileges

Bulletin has no description...

Win32: Postmessage API security flaw

Hello, I would like to bring to your notice a certain vulnerability that has existed in Win 9x platforms for many years and now in Win2k/XP. Most of us our familiar with password revealers and password stealing trojans. Though flaws in Windows Messaging API have been show before this one relates ...

DEBIAN-CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...

MailEnable POP3 Server remote shutdown !:/ -newest ~ (and previous) bufferoverflow-

My first post, please bare with me. -/-About.-/- I found this problem auditing a webserver, it’s a standard bufferoverflow i guess, but i am not sure how to find all the technical information but if anyone knows what to do i would like to know, if some one have the time to send a brief mail or...

Re: хэндшейк ICQ

Hello, 3APA3A! Если не сложно, кинь advisory на [email protected]. Можно вместе с программой, положу на www.security.nnov.ru. See attach. Адвайз писать смысла нет, ибо тезис про "шифрование" в аське касается всех версий протокола, его использовавших. Насколько я знаю, в 7 версии эту фигню...

PT-2001-2604 · Microsoft · Windows 2000

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue allows local users to create a spoofed named pipe when the RunAs service is stopped, then capture cleartext usernames and passwords when clients connect to the service. The vendor disputes this issue, sayin...

CVE-2001-0435

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

Ultimate Bulletin Board

Here is a message I just popped off to infopop about their Ultimate Bulletin Board v5 product. It's not really meant for someone not used to their product. -------------------------------------------------------------------------------- If a user has info stored in a cookie, replies to a message...

Pine (Local Message Grabber) Exploit

Exploit for linux platform in category local exploits ==================================== Pine Local Message Grabber Exploit ==================================== !/bin/sh Grab local pine messages Usage: ./monpine.sh victim pine must use following settings email protected http://hacksware.com x...

Re:

Доброе время суток Учёный Кот!!! Ситуация воспроизводиться следующим образом. Включается NetXray на отловку пакетов желательно настроенно только на атакуемую машину и при обычной попытки зайти на компбютер жертвы ловиться пакет тип NetBIOS,расшифровка в NetXray: Session Request-Called Name: Cyber...

napster.path-disclosure.txt

-------------------------------------------------- time 1:30 am date 9-18-00 affected systems: any system running napster client hasn't been tested for the gnapster client -------------------------------------------------- ADVISORY: here goes...... hi lindsay, pat, jason , and t-rex After running...

Win2k Telnet.exe malicious server vulnerability

/ NTLM telnetD v0.8 Snarfs NTLM challenge/response by convincing w2k telnet client to auto-authenticate. Outputs auth-data in LophtCrack sniff format on stdout. compile: gcc -o w2kteld ntlmtelnetd.c run: ./w2kteld Then wait for w2k to telnet to you. for the impatient, there are always ways of...

Minicom 1.821.83 - Capture-file Group Ownership

Minicom 1.821.83 - Capture-file Group Ownership source: https://www.securityfocus.com/bid/1599/info Minicom is a unix terminal program often used for communication between computers with modems. It is often installed setgid uucp, as this access is required for regular users to use certain devices...

Minicom 1.82/1.83 - Capture-file Group Ownership

source: https://www.securityfocus.com/bid/1599/info Minicom is a unix terminal program often used for communication between computers with modems. It is often installed setgid uucp, as this access is required for regular users to use certain devices on the system. Through specifying a capture-fil...

anonymous SMBwriteX DoS

a new concept had to be invented for this one: "the BSOD". a problem that causes an nt5 server's screen to go black. here is a harmless SMB request, prepared earlier from a netmon capture: SMB C write & X, FID = 0x1801, Write 0x73 at 0x00000000 SMB: C write & X, FID = 0x1801, Write 0x73 at...