CVE-2006-6302

fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containi...

PHPManta 1.0.2 - view-sourcecode.php Local File Inclusion

PHPManta 1.0.2 - view-sourcecode.php Local File Inclusion !/usr/bin/perl Script Name: phpManta - Mdoc = 1.0.2 view-sourcecode.php Local File Include Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; use LWP::Simple; @apache= "../../../../../var/log/httpd/accesslog",...

CVE-2006-5199

Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation, which allows local users to gain privileges to the server...

CVE-2006-5199

CVE-2006-5199 affects Adobe Contribute Publishing Server running on Windows. The installation logs may contain the administrator password, enabling a local user to gain privileges to the server and potentially access related resources. The public records in the provided documents confirm the leak...

OpenSSH < 4.4 Multiple Vulnerabilities

Binary data 3751.prm...

OpenSSH < 4.4 Multiple Vulnerabilities

According to its banner, the version of OpenSSH installed on the remote host is affected by multiple vulnerabilities : - A race condition exists that may allow an unauthenticated, remote attacker to crash the service or, on portable OpenSSH, possibly execute code on the affected host. Note that...

CVE-2006-4991

RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...

CVE-2006-4991

RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...

CVE-2006-4991

RSA Keon Certificate Authority (KeonCA) Manager versions 6.5.1 and 6.6 are affected. The vulnerability allows local privileged users to hide CA activities by tampering auditor logs: (1) modifying or deleting a and its signature in the XML log without triggering the integrity check on the entire ...

AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================= AlstraSoft E-Friends = 4.85 Remote Command Execution Exploit ============================================================= !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command...

CVE-2006-4642

AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file...

Wikepage Opus 10 2006.2a (lng) - Remote Command Execution

Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...

barracudeHardcode.txt

Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...

sendcard_340_xpl.txt

!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...

CVE-2006-4001

CVE-2006-4001 concerns Barracuda Spam Firewall (BSF): affected firmware versions 3.3.01.001–3.3.03.053 contain a hard-coded password for the guest account, enabling remote attackers to read sensitive data such as e-mail logs and potentially e-mail contents and the admin password. Related connecte...

CVE-2006-4001

Login.pm in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password...

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue

-- Corsaire Security Advisory -- Title: VMware ESX Server Password Disclosure in Log issue Date: 14.11.05 Application: VMware ESX prior to 2.5.3 upgrade patch 2 VMware ESX prior to 2.1.3 upgrade patch 1 VMware ESX prior to 2.0.2 upgrade patch 1 Environment: VMware ESX Author: Stephen de Vries...

Cross-Site Scripting and Local File Inclusion in Phorum

Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...

Mercury Messenger

Problem description: Mercury Messenger, http://www.mercury.to/, is a java based messenger that will allow it's users to chat with MSN users. Currently it has been noted by two people that on a multi user OS X platform it is possible to read the chat logs from other users. The user specific...

CVE-2006-3669

Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...