CVE-2006-6306

Format string vulnerability in Novell Modular Authentication Services NMAS in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window...

CVE-2006-6306

Format string vulnerability in Novell Modular Authentication Services NMAS in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window...

CVE-2006-6306

The CVE-2006-6306 entry documents a local format-string vulnerability in NMAS within the Novell Client 4.91 SP2/SP3. The flaw affects the Username field of the logon window, allowing users with physical access to read stack and memory contents via format specifiers. The connected documents do not...

[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities

KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...

XSS vulnerability in Blojsom

I. BACKGROUND Taken from the Blojsom Website : "Blojsom is a Java-based, full-featured, multi-blog, multi-user software package that was inspired by blosxom. blojsom aims to retain a simplicity in design while adding flexibility in areas such as the flavors, templating, plugins, and the ability t...

PT-2006-5265 · Microsoft · Terminal Server

Name of the Vulnerable Software and Affected Versions: Microsoft Terminal Server affected versions not specified Description: The issue allows local users to execute arbitrary code by forcing an Explorer error when running an application session with specific options. These options, "Start progra...

[Full-disclosure] [vuln.sg] Cybozu Garoon 2 SQL Injection Vulnerabilities

vuln.sg Vulnerability Research Advisory Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary ------- Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL...

CVE-2006-4347

SQL injection vulnerability in user logon authentication request handling in CoolCoolD.exe in Cool Manager 5.0 5,60,90,28 and Cool Messenger Office/School Server 5.5 5,65,12,13 allows remote attackers to execute arbitrary SQL commands via the username field...

Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit ======================================================...

Eskolar CMS 0.9.0.0 Remote Blind SQL Injection Exploit

No description provided by source. ================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

Eskolar CMS 0.9.0.0 - Blind SQL Injection

Eskolar CMS 0.9.0.0 - Blind SQL Injection ================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

Juniper Networks DX crossite scripting

It's possible to injecty scripts via logon fields into system log entry viewable through web interface...

CVE-2006-3205

Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to gain access via modified userenv, passenv, powerenv, and idenv parameters in a cookie, which comprise a persistent logon that does not vary across sessions...

PT-2006-4100 · Upb · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to gain access by modifying certain parameters in a cookie. These parameters, including user env, pass env, power env, and id env, can be exploit...

CVE-2006-3205: Undefined Security Weakness

Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to gain access via modified userenv, passenv, powerenv, and idenv parameters in a cookie, which comprise a persistent logon that does not vary across sessions...

Windows Software Restriction Policy Protection Bypass

Windows Software Restriction Policy Protection Bypass Class: Protection bypass Vector: Local Tested on: Windows XP SP2, Windows Server 2003 SP1 Risk: Low Remark: I don't know, what is it - bug or feature, but I can't find any documentation on this issue. Description: Software Restriction Policies...

Authentication flaw

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

CVE-2006-2206

The CVE-2006-2206 entry concerns UltraVNC 1.0.1 whose MS-Logon scheme uses weak XOR encryption for challenge/response. This weak cryptography permits an attacker on the network to sniff credentials and decrypt passwords, enabling privilege escalation.

CVE-2006-2206

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

Vulnerability in the way [email protected] handles MS-Logon Authentication.

AGR IT Advisory May 2, 2006 AGR-ADV-2006-01 TITLE: Vulnerability in the way [email protected] handles MS-Logon Authentication. Overview Deon Force discovered a vulnerability in Ultr@VNC 1.0.1 and earlier versions with MS-Logon I and MS-Logon II authentication that may allow attackers to crack the...