Boozt 0.9.8 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/3787/info Boozt! is a free open source banner management software for Linux hosts. An issue has been reported which could allow for a user to execute arbitrary code on a Boozt! host. This is acheivable when a Boozt! user attempts to create a new banner...

LaBrea Tarpitted Host Detection

This script performs a Labrea tarpit scan, by sending a bogus ACK and ACK-windowprobe to a potential host. It also sends a TCP SYN to test for non-persisting labrea machines. This script was written by John [email protected] See the Nessus Scripts License for details include"compat.inc...

CVE-1999-1467

The CVE-1999-1467 issue affects the rcp service on SunOS 4.0.x. The underlying problem is tied to the configuration of the nobody user, enabling remote attackers from trusted hosts to execute arbitrary commands as root. The connected PT-1989-1001 entry confirms SunOS 4.0.x as the affected platfor...

GNU Privacy Guard 1.0.x - Format String

GNU Privacy Guard 1.0.x - Format String source: https://www.securityfocus.com/bid/2797/info GnuPG is a popular open source public/private key encryption system. It is possible for attackers to create an encrypted document that will exploit a format string vulnerability in the GnuPG client when th...

PHP Security Advisory - Apache Module bugs

Problems ========= 1 PHP supports a configuration mechanism that allows users to configure PHP directives on a per-directory basis. Under Apache, this is usually done using .htaccess files. Due to a bug in the Apache module version of PHP, remote 'malicious users' might be able to create a specia...

Netopia ISDN Router 650-ST: Viewing of all system logs without login

This advisory was sent to Netopia three weeks ago. I have received no return contact. Andrew ---------------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Device Specifics ================= Name: Netopia ISDN Router 650-ST Manufacturer: Netopia Version: Firmware 3.3.2 Risk: Viewing of all system...

openssh.forwarding.txt

Hostile servers can force OpenSSH clients to do agent or X11 forwarding 1. Systems affected: All versions of OpenSSH prior to 2.3.0 are affected. 2. Description: If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup...

OpenSSH Security Advisory (adv.fwd)

Hostile servers can force OpenSSH clients to do agent or X11 forwarding 1. Systems affected: All versions of OpenSSH prior to 2.3.0 are affected. 2. Description: If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup...

CVE-1999-0550

Technical details (affected product/version/patch/fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-1999-0524

CVE-1999-0524 is an ICMP information-disclosure vulnerability where ICMP replies reveal (1) netmask and (2) timestamp to arbitrary hosts. Connected reports link it to multiple products (e.g., Nutanix AHV advisories NXSA‑AHV series and ABB M2M Gateway plugin) and describe the issue as an informati...

CVE-1999-0523

Technical details (affected products, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-1999-0523

ICMP echo ping is allowed from arbitrary hosts...

CVE-1999-0571

A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...

CVE-1999-0510

Technical details about CVE-1999-0510 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0524

ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...

CVE-1999-0539

A trust relationship exists between two Unix hosts...

CVE-1999-0524

ICMP information such as 1 netmask and 2 timestamp is allowed from arbitrary hosts...

NetBus 1.x Software Detection

NetBus 1.x is installed. NetBus is a remote administration tool that can be used for malicious purposes, such as sniffing what the user is typing, its passwords and so on. An attacker may have installed it to control hosts on your network. Furthermore, Netbus authentication may be bypassed...

sl0scan.pl

Date: Tue, 9 Feb 1999 20:53:34 -0500 From: miff To: [email protected] Subject: sl0scan ambiguous source portscanner hello all, I hear that maybe nmap does something similar to this, but I'm posting it anyway to see if there is enough interest for me to continue developing it. This is based on...

netbsd.arp.table.txt

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-010 ================================= Topic: ARP table vulnerability Version: NetBSD-1.3 Severity: Denial of service or traffic hijacking from local network cable is possible Abstract ======== The implementation of ARP packet...