Multiple Vulnerabilities in AlternC version 0.9.5

ground418 security advisory Date: 28-11-2006 Subject: Multiple Vulnerabilities in AlternC version 0.9.5 and below. Author: Vincent Audet Mnard [email protected] Original File: http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt Related Files:...

MDaemon WebAdmin模块权限提升漏洞

WebAdmin是Alt-N开发的管理MDaemon、RelayFax和WorldClient的WEB应用程序。 由于没有正确的过滤管理界面的logfileview.wdm和configfileview.wdm文件，导致已认证的全局管理员可以通过类似于以下的方式访问基础文件系统： http://mdaemon:1000/configfileview.wdm?file=../../autoexec.bat http://mdaemon:1000/logfileview.wdm?type=webadmin&file=../../App/userlist.dat...

Cisco VPN 3000 Concentrator 4.1.7/4.7.2 - 'FTP' Remote File System Access

/ Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation of FTP service commands. An unauthenticated user can use the following...

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access

Cisco VPN 3000 Concentrator 4.1.74.7.2 - FTP Remote File System Access / Cisco VPN Concentrator 3000 FTP remote exploit ============================================== A vulnerability exists in the Cisco VPN Concentrator 3000, an unauthenticated user may access the file system through manipulation...

CVE-2002-1974

The CVE-2002-1974 entry concerns the FTP service in Zaurus PDAs SL-5000D and SL-5500 that does not require authentication, enabling remote attackers to access the file system as root. Affected component: FTP service on the specified Zaurus models. Root cause: unauthenticated access to the FTP ser...

CVE-2005-0349

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

Exploit Labs Security Advisory 2005.2

------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...

ARGENISS-ADV-030501.txt

Argeniss Security Advisory Name: Oracle Database Server Directory transversal Affected Software: Oracle Database Server versions 8i and 9i Severity : Medium Remote exploitable: Yes Authentication to Database Server is needed Credits: Cesar Cerrudo Date: 03/07/05 Advisory Number: ARG030501 Details...

CVE-2005-0496

Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands...

CVE-2005-0349

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

CVE-2005-0349

The CVE-2005-0349 entry covers BrightStor ARCserve Backup 11.1 UniversalAgent for UNIX, where the production release contains hard-coded credentials that enable remote access to the file system and may allow execution of arbitrary commands. Connected details specify a default/admin-like account w...

CVE-2005-0349: Undefined Security Weakness

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

Full path disclosure in PHP Links

Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...

IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQL Injection, Account Manipulation, Cross-site Scripting, Information disclosure...

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQ...

Crystal Reports Vulnerabilities

Dear List, Impervatm's Application Defense Center has discovered several vulnerabilities in BusinessObject's Crystal Reports' Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a...

IBM Lotus Domino 6/7 - HTTP webadmin.nsf Directory Traversal

source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue reportedly exists in the server's administrative...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

[LSD] Java and JVM security vulnerabilities

We would like to inform you about several security vulnerabilities in Java Virtual Machine implementations that we have found during our research. These vulnerabilities affect at least JVMs used in Netscape Communicator and Microsoft Internet Explorer web browsers. Below you can find their brief...