226 matches found
Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln
No description provided by source. Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details ---------------------...
5 on Microsoft patch KB2871997 and KB2928120 exploit analysis-exploit warning-the black bar safety net
5 month, Microsoft in 1 3, released monthly security update, which has KB2871997 and KB2928120 two Knowledge Base articles Knowledgeased and KB2871997 is not even a Security Bulletin to. For either as the attack of the penetration tester or as a defense of the Administrators ignore these two...
samba -- denial of service vulnerability
The Samba project reports: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file...
Denial of service - CPU loop and memory allocation.
Description All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local...
Sourcefire 3D Sensor and DC, privilege escalation vulnerability
Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details --------------------- A privilege escalation vulnerabili...
Sourcefire 3D Sensor / Defense Center Privilege Escalation
Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details --------------------- A privilege escalation vulnerabili...
Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln
Exploit for cgi platform in category web applications ===================================================================== Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln ===================================================================== Affected product ----------------...
Sourcefire 3D Sensor & Defense Center 4.8.x Privilege Escalation Vuln
No description provided by source. Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details ---------------------...
Copy and the real hidden administrator account(complete batch)-bug warning-the black bar safety net
Online to see a lot of copy administator permissions to the account of the method or tool, such as the establishment of the admin$, the so-called hidden account. And copy administrator permissions. In fact, this is a temporary, one-time hidden only, Server reboot through the“Computer Management”o...
CVE-2005-2503
Affected software: AppKit on Mac OS X 10.3.9 and 10.4.2. Vulnerability: allows attackers with physical access to create local accounts by forcing a specific error at the login window. Impact/conditions: local access; described CVSS as local, with partial confidentiality, integrity, and availabili...
CVE-2005-2503
AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window...
RHEL 2.1 : sendmail (RHSA-2002:259)
The sendmail packages shipped with Red Hat Linux Advanced Server have a security bug if sendmail is configured to use smrsh. This security errata release fixes the problem. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 SMRSH the SendMail Restricted SHell is a /bin/sh...
Cisco Unity multiple bugs
Local account with predefined passsword, server awaits for connection from statically compiled address. etc/...
Gaim IRC Local Account Information Leakage
When logging into IRC via gaim, gaim registers the user with their valid local account id as well as the nick chosen by the end user. This is revealed when an attacker asks for information regarding the victim. Given that the host name DNS/IP is also registered, an attacker now knows both the...
Checkpoint/Restart Vulnerability on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Checkpoint/Restart Vulnerability Number : 20030802-01-P Date : August 14, 2003 Reference : CVE CAN-2003-0679 Reference : SGI BUG 894920 Fixed in : IRIX 6.5.22 or patches 5264 through 5269 SGI provides this information freely to the...
ICQ Pro 2003a - 'ca1-icq.asm' Password Bypass
; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows you to login to ICQ server using a...
ICQ Pro 2003a - ca1-icq.asm Password Bypass
ICQ Pro 2003a - ca1-icq.asm Password Bypass ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This explo...
ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)
Exploit for unknown platform in category local exploits =================================================== ICQ Pro 2003a Password Bypass exploit ca1-icq.asm =================================================== ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ;...
MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)
The remote version of Windows has a flaw in the way the kernel passes error messages to a debugger. An attacker could exploit it to gain elevated privileges on this host. To successfully exploit this vulnerability, an attacker would need a local account on this host. C Tenable Network Security,...
Buffer Overrun Vulnerability in /sbin/ps on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Buffer Overrun Vulnerability in /sbin/ps Number : 20030202-01-I Date : February 26, 2003 Reference: CVE-1999-0301 Reference: SGI BUG 696723 Fixed in : IRIX 6.5.5 or later - ----------------------- - --- Issue Specifics --- -...