558 matches found
CVE-2004-0391
Cisco Wireless LAN Solution Engine WLSE 2.0 through 2.5 and Hosting Solution Engine HSE 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration...
susegnome.txt
Author: l0om Date: 12.01.2004 page: www.excluded.org SuSE 9.0 - YaST script SuSEconfig.gnome-filesystem There is a symlink problem in the SuSEconfig.gnome-filesystem scribt. a normal user can creat and overwrite every file on the system. This script gets executed after a configuration change by t...
[SCSA-023] Multiple vulnerabilities in Mambo Server
====================================================================== Security Corporation Security Advisory SCSA-023 Multiple vulnerabilities in Mambo Server ====================================================================== PROGRAM: Mambo Server HOMEPAGE: http://www.mamboserver.com...
W3Mail multiple bugs
delete.cgi invokes external program though system call without escaping shell characters. It's possible to change server configuration without administrator's permissions. All passwords are stored in Base64 encoding...
[SecurityOffice] Polycom Video Conference System Management Server Authentication Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Polycom Video Conference System Management Server Authentication Bypass Vulnerability -- - -- Type Design Error - -- Release Date December 19, 2002 - -- Product / Vendor The Polycom ViewStation FX set top video system provides TV-quality video for...
Linksys Devices 1.421.43 - GET Buffer Overflow (PoC)
Linksys Devices 1.421.43 - GET Buffer Overflow PoC source: https://www.securityfocus.com/bid/6301/info Several Linksys Broadband Router devices are prone to a buffer overflow conditions. The vulnerability occurs due to insufficient allocation of memory for buffers. An attacker can exploit this...
Input-validation vulnerability in PHP-Nuke allows arbitrary command execution via request for remote web site
Overview PHP-Nuke has an input-validation vulnerability that can lead to execution of arbitrary PHP code hosted on another web server. Description PHP-Nuke is a tool designed to ease web site creation and maintenance. PHP-Nuke includes a script named index.php, which uses PHP's include function t...
Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920)
---------------------------------------------------------------------- Title: 26 June 2002 Cumulative Patch for Windows Media Player Q320920 Date: 26 June 2002 Software: Windows Media Player Impact: Three new vulnerabilities, the most serious of which could run code of attacker's choice Max Risk:...
CVE-2002-0540
Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration...
Linksys Router Default Password
The remote Linksys router accepts the default password 'admin' for the web administration console. This console provides read/write access to the router's configuration. An attacker could take advantage of this to reconfigure the router and possibly re-route traffic. This script is Copyright C...
SSHD allows users to override "AllowedAuthentications" configuration thereby permitting users to provide any type of authentication
Overview A remotely exploitable authentication vulnerability exists in the SSH Communications Security SSH Secure Shell server, and possibly other SSH servers. Description SSH is a program used to provide secure communications between hosts. Versions 3.0.0 - 3.1.1 of SSH Secure Shell for Servers...
Hewlett Packard AdvanceStack Switch Managment Authentication Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hewlett Packard AdvanceStack Switch Managment Authentication Bypass Vulnerability Type: Access Validation Error Release Date: February 8, 2002 Product / Vendor: HP AdvanceStack 10Base-T Switching Hubs combine economical 10Base-T functionality with the...
CVE-2001-0791
Trend Micro InterScan VirusWall for Windows NT is vulnerable via CGI programs that handle configuration and do not restrict access. Remote attackers could modify configuration by directly invoking these CGI scripts. Root cause is lack of access controls on certain CGI endpoints. Affected product/...
[SNS Advisory No.30] Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication
SNS Advisory No.30 Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication Problem first discovered: 24 May 2001 Published: 12 Jun 2001 Last Updated:12 Jun 2001 ----------------------------------------------------------------------- Overview --------- It is...
CVE-2001-0033
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...
CVE-1999-0415
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration...
