HTTP Server type and version

This script detects and reports the HTTP Server SPDX-FileCopyrightText: 2005 H. Scholz & Contributors Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Relative IP Identification number change

The remote host uses non-random IP IDs, that is, it is possible to predict the next value of the ipid field of the ip packets sent by this host. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Oracle Database Detection (TNS service)

TNS service based detection of an Oracle Database Server SPDX-FileCopyrightText: 2005 James W. Abendschan Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Detect slident and/or fake identd

The remote ident server returns random token instead of leaking real user IDs. This is a good thing. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-2937

CVE-2005-2937 is rejected/not used; consult CVE-2005-3663/3664 to determine the appropriate ID.

Fedora Core 4 : kernel-2.6.12-1.1447_FC4 (2005-820)

Fri Aug 26 2005 Dave Jones 2.6.12-1.1447FC4 - Better identify local builds. 159696 - Fix disk/net dump & netconsole. 152586 - Fix up sleeping in invalid context in sym2 driver. 164995 - Fix 'semaphore is not ready' error in snd-intel8x0m. - Restore hwclock functionality on some systems. 144894 -...

Fedora Core 3 : kernel-2.6.12-1.1376_FC3 (2005-821)

Fri Aug 26 2005 Dave Jones 2.6.12-1.1376FC3 - Better identify local builds. 159696 - Fix disk/net dump & netconsole. 152586 - Fix up sleeping in invalid context in sym2 driver. 164995 - Fix 'semaphore is not ready' error in snd-intel8x0m. - Restore hwclock functionality on some systems. 144894 -...

CVE-2002-2058

TeeKai Tracking Online 1.0 is affected by a weak encryption flaw in the stored web usage statistics (data/userlog/log.txt) that enables remote attackers to identify visiting IPs by dividing each octet by the MD5 hash of '20'. The Red Hat advisory and PT-Security notes corroborate the vulnerabilit...

CVE-2000-1237

The CVE-2000-1237 entry concerns the POP3 server in FTGate. The vulnerability arises because the server returns an -ERR response after receiving an invalid USER command, which can be used by a remote attacker to enumerate valid usernames and facilitate brute-force password guessing. Affected comp...

CVE-2002-2058

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2002-2057

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2005-2146

SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server...

CVE-2005-2146

The CVE concerns SSH Tectia Server (Windows) 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, which generate the host key with insecure permissions. This allows a local user to read the private host key and spoof the server, enabling impersonation. Evidence from multiple sources confi...

CVE-2001-1483

CVE-2001-1483 affects OPIE (One-Time Passwords In Everything) versions 2.32 and 2.4. It permits remote attackers to determine whether a user account exists by observing how passphrases are printed: random passphrases if the account does not exist, static passphrases if it does. This is an informa...

ubbprintthread.txt

UBB Thread /ubbthreads/printthread.php SQL Injection Yes\No vulnerability Full Disclosure Bug discovered By: Axl Exploit By: HLL hllhll at gmail.com 1. Introduction There Is a flaw in printthread.php due to insufficient bound checking of the 'main' query parameter wich allows a malicues SQL to be...

CVE-2004-2091

The vulnerability entry CVE-2004-2091 concerns Microsoft Baseline Security Analyzer (MBSA) 1.2. Affected context: MBSA 1.2 may not correctly identify systems that have been patched but remain exploitable until a reboot, potentially giving administrators a false sense of security. Impact is descri...

CVE-2005-1039

Race condition in Core Utilities coreutils 5.2.1, when 1 mkdir, 2 mknod, or 3 mkfifo is running with the -m switch, allows local users to modify permissions of other files...

CVE-2005-0238

The International Domain Name IDN support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...

myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof'

PHOX: myPHP v3 Final 'Sender/Poster Exploit' Content - Credits - 'sploit - Solution Credits Exploit discovered by Phox/Terencentanio/Phoxpherus of Root32. Email: [email protected] / [email protected] 'sploit There are two exploits here. 1. Posting as someone else. It's...

[Full-disclosure] OpenOffice DOC document Heap Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenOffice DOC document Heap Overflow Security Advisory Advisory:ADLAB-05001 OpenOffice DOC document Heap Overflow Class: Design Error DATE:30/3/2005 CVEID:CAN-2005-0941 Vulnerable: =OpenOffice OpenOffice 1.1.4 -OpenOffice OpenOffice 2.0dev...