Extreme Networks switches with ExtremeWare XOS allow arbitrary command execution

Overview Some Extreme Networks switches running ExtremeWare XOS have a vulnerability that allows a malicious authenticated user to escape to the underlying operating system command shell with administrator-level root privileges. Description Extreme Network switches running ExtremeWare XOS contain...

Xerox WorkCentre MicroServer Multiple Vulnerabilities (XRX05-005)

According to its model number and software version, the remote host is a Xerox WorkCentre device with an embedded web server with an unauthenticated account and a weakness in its SNMP authentication. These flaws could allow a remote attacker to bypass authentication and change the device's...

CVE-2005-1179

CVE-2005-1179 concerns Xerox MicroServer Web Server in various WorkCentre models (e.g., M35/M45/M55 with 2.028.11.000–2.97.20.032 and 4.84.16.000–4.97.20.032; Pro 35/45/55 and Pro 65/75/90 ranges listed in the description) where an SNMP authentication issue could allow remote modification of syst...

GLSA-200412-06 : PHProjekt: setup.php vulnerability

The remote host is affected by the vulnerability described in GLSA-200412-06 PHProjekt: setup.php vulnerability Martin Muench, from it.sec, found a flaw in the setup.php file. Impact : Successful exploitation of the flaw allows a remote attacker without admin rights to make unauthorized changes t...

[SA13311] Unicenter Remote Control Arbitrary URC Management Server Access Vulnerability

TITLE: Unicenter Remote Control Arbitrary URC Management Server Access Vulnerability SECUNIA ADVISORY ID: SA13311 VERIFY ADVISORY: http://secunia.com/advisories/13311/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: CA Unicenter Remote Control 6.x...

PHProjekt setup.php Authentication Bypass Arbitrary Code Execution

The remote host is running PHProjekt, an open source PHP Groupware package. It runs on most Linux and Unix variants, in addition to Microsoft Windows operating systems. An unspecified authentication bypass vulnerability is present in the 'setup.php' source file and may be exploited by a remote...

GLSA-200407-22 : phpMyAdmin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200407-22 phpMyAdmin: Multiple vulnerabilities Two serious vulnerabilities exist in phpMyAdmin. The first allows any user to alter the server configuration variables including host, name, and password by appending new settings to...

CVE-2004-1714

BlackICE PC Protection and Server Protection installs 1 firewall.ini, 2 blackice.ini, 3 sigs.ini and 4 protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service crash or modify configuration, as demonstrated by modifying firewall.ini to contain a...

Mandrake Linux Security Advisory : apcupsd (MDKSA-2003:018)

A remote root vulnerability in slave setups and some buffer overflows in the network information server code were discovered by the apcupsd developers. They have been fixed in the latest unstable version, 3.10.5 which contains additional enhancements like USB support, and the latest stable versio...

D-Link AirPlus DI-614+ / DI-624 / DI-704 - DHCP Log HTML Injection

source: https://www.securityfocus.com/bid/10587/info It is reported that the DI-614+, DI-704, and the DI-624 are susceptible to an HTML injection vulnerability in their DHCP log. An attacker who has access to the wireless, or internal network segments of the router can craft malicious DHCP...

Nokia Gateway GPRS support node vulnerable to DoS

Overview A vulnerability in the Nokia Gateway GPRS support node GGSN may allow a remote attacker to cause a denial of service. Description A vulnerability in the GGSN may allow a remote attacker to restart the device. For technical details, please see the @stake Security Advisory Nokia GGSN IP650...

CVE-2002-0250

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the webaccess.html file, which allows the user to change the switch's configuration and modify the...

NAVCE 7.51 default permission exploit

============================================================ Topic: ===== Default NTFS permissions post-software install allow local user security context to modify "managed" Norton AntiVirus Corporate Edition 7.51 client configuration. Affected: ======== Norton AntiVirus Corporate Edition NAVCE...

CVE-2001-0791

Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access...

[SNS Advisory No.43] PGP Keyserver Permissions Misconfiguration

---------------------------------------------------------------------- SNS Advisory No.43 PGP Keyserver Permissions Misconfiguration Problem first discovered: Fri, 3 Aug 2001 Published: Fri, 28 Sep 2001 ---------------------------------------------------------------------- Overview: --------- PGP...

Trend Micro Interscan VirusWall for Windows NT 3.51 - Configurations Modification

Trend Micro Interscan VirusWall for Windows NT 3.51 - Configurations Modification source: https://www.securityfocus.com/bid/2859/info A remote user could utilize the administrator functions of Interscan Viruswall without providing authentication credentials. This may allow the user to make...

Trend Micro Interscan VirusWall for Windows NT 3.51 - Configurations Modification

source: https://www.securityfocus.com/bid/2859/info A remote user could utilize the administrator functions of Interscan Viruswall without providing authentication credentials. This may allow the user to make configuration changes when submitting specially crafted URLs to the host...

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

ff.core.sh

Date: Thu, 7 Jan 1999 12:28:59 -0500 From: John McDonald To: [email protected] Subject: really silly ff.core exploit for Solaris Hi, At the bottom of this email is an exploit I wrote a little bit ago for /usr/openwin/bin/ff.core on Solaris 2.5.1, and 2.6. I have tested it on a few machines, wi...

[SECURITY] New version of samba released

The version of samba as distributed in Debian GNU/Linux 2.1 has a couple of security problems: a Denial-of-Service attack against nmbd was possible it was possible to exploit smbd if you had a message command defined which used the %f or %M formatter. smbmnts check to see if a user is allowed to...