1301 matches found
HP OpenView OmniBack II Generic Remote Exploit
No description provided by source. / HP OpenView OmniBack II generic remote Exploit by DiGiT - [email protected] Omniback is a network backup system by HP, widely used. took me some time to figure out how omniback communicated then it was just a matter of finding a bug. This lovely little exploit wi...
agenda.txt
Agenda - Remote File Include ------------------------------------------------------------------------------------ Description: A complete calendar solution with component and module part for mambo cms. The issue is at the calendar module. Bug Found by: jank0 greetz: hackbsd crew risk: dangerous...
CVE-2006-4081
previewemail.cgi in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters "|" pipe symbol in the file parameter. NOTE: the attack can be extended to arbitrary commands by the presence of CVE-2006-4000...
Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion
Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at...
Mambo Colophon Component <= 1.2 Remote Inclusion Vulnerability
No description provided by source. Command Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug:...
Mam-Moodle Mambo Component alpha Remote Inclusion Vulnerability
No description provided by source. Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path:...
CVE-2006-3697
Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...
Symantec real-time scan service buffer overflow
Added: 06/13/2006 CVE: CVE-2006-2630 BID: 18107 OSVDB: 25846 Background Various Symantec products include a real-time virus scan service. Problem A buffer overflow in the real-time virus scan service allows remote attackers to execute arbitrary commands. Resolution Apply patch SYM06-010. Referenc...
CVE-2006-2703
The CVE-2006-2703 entry concerns the RedCarpet command-line client (rug), where the SSL certificate verification is not performed by the client when connecting to a server. This weaknesses permits a MITM attacker to read traffic and potentially execute commands through the intercepted connection....
CVE-2006-2671
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...
SHOUTcast filename format string vulnerability
Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...
Novell GroupWise Messenger Accept-Language buffer overflow
Added: 04/20/2006 CVE: CVE-2006-0992 BID: 17503 OSVDB: 24617 Background Novell GroupWise includes the Messaging Agent which offers an HTTP service on port 8300/TCP. Problem A buffer overflow in the Messaging Agent allows remote attackers to execute commands by sending a long, specially crafted...
Novell GroupWise Messenger Accept-Language buffer overflow
Added: 04/20/2006 CVE: CVE-2006-0992 BID: 17503 OSVDB: 24617 Background Novell GroupWise includes the Messaging Agent which offers an HTTP service on port 8300/TCP. Problem A buffer overflow in the Messaging Agent allows remote attackers to execute commands by sending a long, specially crafted...
Discuz! <= 4.0.0 rc4 Arbitrary File Upload Flaw
The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on th...
BakBone NetVault remote heap overflow
Added: 03/24/2006 CVE: CVE-2005-1009 BID: 12967 OSVDB: 15234 Background BakBone NetVault is a distributed data backup and restore solution for UNIX and Windows networks. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...
SUSE-SA:2006:017: sendmail
The remote host is missing the patch for the advisory SUSE-SA:2006:017 sendmail. The popular MTA sendmail is vulnerable to a race condition when handling signals. Under certain circumstances this bug can be exploited by an attacker to execute commands remotely. Sendmail was the default MTA in SuS...
CVE-2006-1353
Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...
SSH.COM SFTP server -- format string vulnerability
SSH Communications Security Corp reports a format string vulnerability in their SFTP server. This vulnerability could cause a user with SCP/SFTP access only to get permission to execute also other commands. It could also allow user A to create a special file that when accessed by user B allows us...
