39 matches found
Brocade Fabric OS Security Bypass Vulnerability (CNVD-2018-23085)
Brocade Fabric OS FOS is an embedded operating system used in devices such as switches and routers from Brocade Communications Systems Brocade. command line interface CLI is one of the command line interfaces. A security vulnerability exists in the 'help' command in the Brocade FOS CLI. A local...
CVE-2018-6437
A Vulnerability in the help command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...
BSA-2018-731
Security Advisory ID : BSA-2018-731 Component : Fabric OS CLI Revision : 1.0: Initial Multiple Vulnerabilities in Brocade Fabric OS command line interface CLIcould allow a local attacker toescape the restricted shell and, gain root access. Commands Affected help command -CVE-2018-6437 - CVSS 3: 7...
Git Shell Bypass By Abusing Less (CVE-2017-8386)
The git-shell is a restricted shell maintained by the git developers and is meant to be used as the upstream peer in a git remote session over a ssh tunnel. The basic idea behind this shell is to restrict the allowed commands in a ssh session to the ones required by git which are as follows:...
CVE-2017-8386: using the less command to bypass the git-shell limit-vulnerability warning-the black bar safety net
git-shell git remote session on the introduction of a ssh tunnel, is a restricted shell. Its the basic idea behind is, in the ssh session limit to be able to execute the command, so that it can only execute git needs the appropriate command. git needs to execute the command as follows:...
Inetserv 3.23 SMTP Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: Inetserv 3.23 SMTP DoS Date: 1/22/2011 Author: G13 Software Link: http://www.avtronics.net/inetserv.php Version: 3.23 Tested on: WinXP SP0 Eng import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = EXPN + %s 40 +...
Majordomo2 directory traversal
Directory traversal on help command processing via e-mail or Web...
PT-2011-2045 · Great Circle Associates · Majordomo
Name of the Vulnerable Software and Affected Versions: Majordomo versions prior to 20110131 Description: The issue allows remote attackers to read arbitrary files via .. dot dot sequences in the help command. This can be achieved by sending a crafted email or by exploiting the web interface,...
DEBIAN-CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
UBUNTU-CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
Null pointer dereference
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
ircd-ratbox 'HELP' Command Denial Of Service Vulnerability
The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100471";...
hybrid and ratbox IRC servers multiple security vulnerabilities
LINKS command, integer overflow, HELP command DoS...
DSA-1980-1 ircd-hybrid ircd-ratbox - arbitrary code execution
Bulletin has no description...
XM Easy Personal FTP Server DoS
Buffer overflow on HELP and TYPE commands...
FSD flight simulator game server buffer overflows
Multiple buffer overflows, including HELP command...
cesarFTP v0.98b 'HELP' buffer overflow
DESCRIPTION CesarFTP v0.98b is vulnerable to a buffer overflow when sending the HELP command followed by a very long string of characters. Example : Sending the following perl string : "HELP " . "A" x 1978 . "CCCCx00x0Dx0A" Happily reroutes the SERVER.EXE EIP to 43434343 "CCCC". This way, anyone...
CVE-1999-0531
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...