gProFTPD ProFTPD FTP server monitoring tool format tring bug

Format string bug during server log file parsing...

CVE-2004-1513

The CVE-2004-1513 entry concerns 04WebServer 1.42, where log-writing data is not properly filtered, allowing remote attackers to inject carriage return characters and spoof log entries. The issue affects the logging component, enabling log tampering without affecting other content. The provided s...

CVE-2005-0481

TrackerCam 5.12 and earlier is affected. A remote attacker can read log files by supplying a fn parameter to the ComGetLogFile.php3 script. The affected component is the ComGetLogFile.php3 endpoint of TrackerCam; root cause details are not specified in the provided documents. Impact is partial co...

CVE-2005-0481

TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script...

CVE-2005-0480

Cross-site scripting XSS vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log file...

CVE-2004-1513

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...

AWStats 5.x6.x - Logfile Remote Command Execution

AWStats 5.x6.x - Logfile Remote Command Execution source: https://www.securityfocus.com/bid/12572/info AWStats is reported prone to a remote arbitrary command-execution vulnerability. This issue occurs because the application fails to properly sanitize user-supplied data. Specifically, the...

AWStats: Remote code execution

Background AWStats is an advanced log file analyzer and statistics generator. Description When 'awstats.pl' is run as a CGI script, it fails to validate specific inputs which are used in a Perl open function call. Furthermore, a user could read log file content even when plugin rawlog was not...

[NEWS] Multiple Vulnerabilities in Netgear FVS318 Router

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[Full-Disclosure] Minis directory traversal vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Minis directory traversal vulnerability Vulnerability discovery: Madelman madelman AT iname.com Date: 31/12/2004 Severity: Moderate Summary: - -------- from vendor site: http://minis.sourceforge.net/ Minis is a tiny, PHP-powered, text-file base...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...

CVE-2004-2070

The Altiris Client Service for Windows 5.6 SP1 Hotfix E 5.6.181 allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590...

CVE-2004-1513

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...

Sharepoint 2003 installation fails and account password revealed in setup log

System tested/affected: WSS, SharePoint 2003 - Hebrew localized version Details: I have a domain user account which has a complex password, including a leading dash -. After installing SPS components which includes WSS, I was prompted to enter database access account, at which point I entered the...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CUPS stores user account details in plain text in log file

Overview When an SMB printer is configured, CUPS stores plain text login information to the log file. Description CUPS is a cross-platform printing system for UNIX environments. It can use the IPP, LPD, SMB, and JetDirect protocols to interact with printers. The SMB protocol is used to communicat...

04WebServer Multiple Vulnerabilities (XSS, DoS, more)

The remote host is running a version of 04WebServer which is older than version 1.5. Such versions are affected by multiple vulnerabilities : - A cross-site scripting vulnerability in the Responsedefault.html script which could allow an attacker to execute arbitrary code in the user's browser. - ...

04webserver 1.42 - Multiple Vulnerabilities

04webserver 1.42 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11652/info Multiple remote vulnerabilities reportedly affect 04WebServer. These issues are due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

04webserver 1.42 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/11652/info Multiple remote vulnerabilities reportedly affect 04WebServer. These issues are due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage these issues to carry out cross-site scripting attacks agains...

Quick 'n EasY 2.4 FTP Server - Remote Denial of Service

!/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is viewed or just at the time it will be viewed.This sploi...