Vulnerabilities in the Internet Key Exchange Xauth Implementation

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

Cisco Security Advisory: Vulnerabilities in the Internet Key Exchange Xauth Implementation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Vulnerabilities in the Internet Key Exchange Xauth Implementation ================================================================= Revision 1.0 For Public Release 2005 April 6 1600 UTC -...

Cisco IOS IKE XAUTH ISAKMP IPSec SA Establish Authentication Bypass (CSCeg00277)

The remote version of IOS contains a feature called 'Easy VPN Server' that allows the administrator of the remote router to create a lightweight VPN server. There is an implementation flaw in the remote version of this software that could allow an authorized user to complete authentication and...

dcrab-e-xoops.txt

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum E-XOOPS Date: March 28, 2005 Summary: There are multiple sql injection, xss...

phpBB 2.0.12 - Session Handling Authentication Bypass

phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.txt ..located on "C:\Documents and...

CVE-2004-1744

Easy File Sharing EFS Webserver 1.25 allows remote attackers to cause a denial of service CPU consumption or crash via many large HTTP requests...

CVE-2004-1744

Technical details about CVE-2004-1744 are not provided in the connected documents. The Initial Description lacks vendor/product/version specifics or fixes. Monitor for updates.

CVE-2004-1743

Easy File Sharing EFS Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the diskc virtual folder...

CVE-2004-2467

chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service server crash...

CVE-2004-2465

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2004-2466

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

CVE-2004-2747

Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...

PT-2004-3358 · Unknown · Easy Chat Server

Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 1.2 through 2.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a server crash. This can be achieved by providing a long username parameter, possibly due to a buffer overflow...

Quick 'n EasY 2.4 FTP Server - Remote Denial of Service

!/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is viewed or just at the time it will be viewed.This sploi...

Quick n EasY 2.4 FTP Server - Remote Denial of Service

Quick n EasY 2.4 FTP Server - Remote Denial of Service !/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is...

Easy File Sharing Webserver 1.25 Denial of Service Exploit

No description provided by source. Easy File Sharing Webserver v1.25 Denial Of Service Proof Of Concept Code By GulfTech Security Research Easy File Sharing Webserver v1.25 will consume 99% of CPU usage until it crashes when sent large req's use IO::Socket; print...

Easy File Sharing Web Server 1.25 - Denial of Service

Easy File Sharing Webserver v1.25 Denial Of Service Proof Of Concept Code By GulfTech Security Research Easy File Sharing Webserver v1.25 will consume 99% of CPU usage until it crashes when sent large req's use IO::Socket; print "=====================================================n". " Easy Fil...

Easy File Sharing Web Server 1.25 - Denial of Service

Easy File Sharing Web Server 1.25 - Denial of Service Easy File Sharing Webserver v1.25 Denial Of Service Proof Of Concept Code By GulfTech Security Research Easy File Sharing Webserver v1.25 will consume 99% of CPU usage until it crashes when sent large req's use IO::Socket; print...

Easy File Sharing Webserver 1.25 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== Easy File Sharing Webserver 1.25 Denial of Service Exploit ========================================================== Easy File Sharing Webserver v1.25 Denial Of Service Proof Of Concept...

Easy File Sharing Web Server disk_c Virtual Folder Request Arbitrary File Access

The remote host is running Easy File Sharing Web Server, a web server package designed to facilitate file sharing. There is a flaw in the remote version of this software that could allow a remote attacker to read arbitrary files on the remote host. C Tenable Network Security, Inc...