117 matches found
DreamPoll 3.1 - SQL Injection
DreamPoll 3.1 - SQL Injection During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client...
Multiple Cisco Clean Access vulnerabilities
Shared secret for client access is same for all devices and can not be changed. Location of database backup snapshot can be bruteforced and downloaded without authentication...
Multiple Gadu-Gadu instant messenger vulnerabilities
Special device access, buffer overflow, DoS, ability to initiate voice transfer from the client without user intervation...
Cisco Content Services Switch authentication bypass
In case of SSL authentication client can be granted access on SSL reauthentication...
CVE-2005-0868
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
CVE-2005-0868
CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...
CVE-2005-0868: Undefined Security Weakness
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
CVE-2004-0885
The modssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration...
MySQL 4.15.0 - Authentication Bypass
MySQL 4.15.0 - Authentication Bypass source: https://www.securityfocus.com/bid/10654/info MySQL is prone to a vulnerability that may permit remote clients to bypass authentication. This is due to a logic error in the server when handling client-supplied length values for password strings...
Irix rpc.mount multiple bugs
Iinformation leak, DoS, access from unprivileged client port...
Nortel Wireless LAN Access Point 2200 Series - Denial of Service
// source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN...
Citrix Client Access Verification
Your professional opinions are appreciated. About a month ago I had posted the below as a Citrix Client Access Advisory and got several responses to the fact that it either it was not a valid vulnerabilty or that it was a default configuration problem. which may be true. but consider this. The...
Компрометация сервера через URL (URL javascript)
В URL специального вида можно включить javascript, который будет передан атакуемым сервером клиенту. Таким образом можно в контексте клдиента получить доступ к атакуемому серверу...
Zeus Web Server 3.x - Null Terminated Strings
Zeus Web Server 3.x - Null Terminated Strings source: https://www.securityfocus.com/bid/977/info Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in...
CVE-1999-0073
Telnet allows a remote client to specify environment variables including LDLIBRARYPATH, allowing an attacker to bypass the normal system libraries and gain root access...
