[Full-Disclosure] 3COM 3crwe754g72-a Administration interface code injection (DHCP)

Title: 3COM 3crwe754g72-a Administration interface code injection Class: Design error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0001 Release Date: 2004-10-18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle...

iDEFENSE Security Advisory 09.27.04 - IBM AIX ctstrtcasd Local File Corruption Vulnerability

IBM AIX ctstrtcasd Local File Corruption Vulnerability iDEFENSE Security Advisory 09.27.04 www.idefense.com/application/poi/display?id=144&type=vulnerabilities September 27, 2004 I. BACKGROUND The ctstrtcasd program is a setuid root application, installed by default under newer versions of IBM AI...

Axis Network Camera 2.x And Video Server 1-3 - 'virtualinput.cgi' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Other commands are also likely to work, facilitating other attacks. This issue is reported to...

Cross-Site Scripting (XSS) in Php-Nuke 7.1.0

Affected software description: Php-Nuke is popular freeware content management system, written in php by Francisco Burzi. This CMS COntent Management System is used on many thousands websites, because its free of charge, easy to install and has broad set of features. Homepage: http://phpnuke.org...

NullSoft Winamp 2.4 < 5.0.4 - '.wsz' Remote Code Execution

source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is currently being exploited in the wild. This vulnerability may ...

Linux Kernel 2.4.20 - 'decode_fh' Denial of Service

/ Linux 2.4.20 knfsd kernel signed/unsigned decodefh DoS Author: jared stanbrough Vulnerable code: fs/nfsd/nfs3xdr.c line 52-64 static inline u32 decodefhu32 p, struct svcfh fhp int size; fhinitfhp, NFS3FHSIZE; size = ntohlp++; if size NFS3FHSIZE return NULL; memcpy&fhp-fhhandle.fhbase, p, size;...

sp-xeneo.pl

!/usr/bin/perl SP Research Labs Advisory x03 ----------------------------- www.security-protocols.com Product - Xeneo Web Server 2.2.9.0 Download it here: http://www.northernsolutions.com/index.php?view=product&id=1 Date Released - 04/21/2003 Release Mode - Vendor was notified on 3/18/2003. Sent ...

iDEFENSE Security Advisory 11.19.02a: Denial of Service Vulnerability in Linksys Cable/DSL Routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.19.02a: http://www.idefense.com/advisory/11.19.02a.txt Denial of Service Vulnerability in Linksys Cable/DSL Routers November 19, 2002 I. BACKGROUND Linksys Group Inc. currently sells several broadband router products,...

Remote Denial of Service Vulnerability in Oracle9i SQL*NET

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brie...

Bug in Eupload

Bug in Eupload ----------------- | By ZeroByte || [email protected] | | ICQ 98177781 | 1.1 - What is Eupload? Eupload, is an web utility used to facilitate the update of web sites by means of scripts CGI. This tool allows the ascent of files to the servant by means of an web interface. The...

Real Networks RealJukebox 1.0.2/RealOne 6.0.10 Player Gold - Skinfile Buffer Overflow

// source: https://www.securityfocus.com/bid/5217/info Real Software has announced a vulnerability in RealJukebox2 and Real Player Gold. A buffer overflow condition exists due to insufficient bounds checking of fields in skinfiles. There is an unchecked buffer for the "CONTROLnImage" field of the...

psyBNC 2.3 - Denial of Service

psyBNC 2.3 - Denial of Service / psyBNC include include include include include include include include include define SIZE 9000 define PORT 31337 define USER "pr0ix" int senddosint port, int...

kebi-webmail_vul.txt

kebi-Webmail Solution vulnerability Tested by secret e-mail: [email protected] Summary : Get webmail server's admin competence by remote attack in kebi-Webmail Solution. Platform: Attacker platform : All Operating Systems + Web browser Target platform: All kebi Webmail solution loading server ke...

[ ** Snes9x buffer overflow vulnerability ** ]

Snes9x buffer overflow vulnerability Affected version: v1.37 prior versions might also be affected. Tested platforms: FreeBSD, NetBSD, OpenBSD and Linux. A buffer overflow vulnerability exists in the snes9x emulator. The problem is that rom names given as an argument upon execution of the program...

[pkc] remote heap buffer overflow in oops

pkc001.txt --- Packet Knights Advisory 001 --- http://www.pkcrew.org Author : |CyRaX| [email protected] Application : Oops proxy server 1.4.22 1.4.6 and maybe prior Type: heap buffer overflow --- The problem --- Function listparser in ftputils.c : line is the line sent by the ftp server in result ...

Flowerfire Sawmill 5.0.21 - File Access

Flowerfire Sawmill 5.0.21 - File Access source: https://www.securityfocus.com/bid/1402/info Sawmill is a site statistics package for Unix, Windows and Mac OS. A specially crafted request can disclose the first line of any world readable file for which the full pathname is known, for example...

fdmount buffer overflow

I searched the archives and did not find this one. Program : fdmount Version : 0.8 OS : linux Slackware 7.0 maybe others This program is normally only executable by members of group 'floppy' and installed suid-root by default. Bug Details: void msgchar text,... char buff80; valist p; vastartp,tex...

unixware.netstation.txt

Greetings, OVERVIEW A vulnerability in IBM's Network Station Manager will allow any local user to gain root privileges. BACKGROUND Though I only tested NetStation on UnixWare 7.1, I would imagine that this vulnerability is present on most NetStation implementations. This daemon is installed/runni...

Greg Matthews - 'Classifieds.cgi' 1.0 MetaCharacter

source: https://www.securityfocus.com/bid/2020/info Classifieds.cgi is a perl script part of the classifieds package by Greg Matthews which provides simple classified ads to web sites. Due to improper input validation it can be used to read files on the host machine, with the privileges of the we...

Sendmail 8.9.2 - Headers Prescan Denial of Service

/ against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include include include include define MAXCONN 4 define LINES...