482 matches found
WWWBoard Password File Disclosure (deprecated)
Binary data 2593.prm...
arkeia.txt
During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...
Arkeia Possible remote root & information leakage
During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...
CUPS < 1.1.23 Multiple Vulnerabilities
According to its banner, the version of CUPS installed on the remote host is between 1.0.4 and 1.1.22 inclusive. Such versions are prone to multiple vulnerabilities : - A remotely exploitable buffer overflow in the 'hpgltops' filter that enable specially crafted HPGL files can execute arbitrary...
CVE-2004-0951
The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...
CUPS: Multiple vulnerabilities
Background The Common UNIX Printing System CUPS is a cross-platform print spooler, hpgltops is a CUPS filter handling printing of HPGL files and lppasswd is a program used locally to manage spooler passwords. Description CUPS makes use of vulnerable Xpdf code to handle PDF files CAN-2004-1125...
GLSA-200412-25 : CUPS: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200412-25 CUPS: Multiple vulnerabilities CUPS makes use of vulnerable Xpdf code to handle PDF files CAN-2004-1125. Furthermore, Ariel Berkman discovered a buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltop...
SharePoint information leak
During installation text file with cleartext password is created in world readable folder...
Debian DSA-188-1 : apache-ssl - several vulnerabilities
According to David Wagner, iDEFENSE and the Apache HTTP Server Project, several vulnerabilities have been found in the Apache package, a commonly used webserver. Most of the code is shared between the Apache and Apache-SSL packages, so vulnerabilities are shared as well. These vulnerabilities cou...
bsd/x86 cat /etc/master.passwd | mail [email] 92 bytes
Exploit for bsd/x86 platform in category shellcode ====================================================== bsd/x86 cat /etc/master.passwd | mail email 92 bytes ====================================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 92 bytes. execve/bin/sh -c...
linux/x86 add user t00r ENCRYPT 116 bytes
linux/x86 add user t00r ENCRYPT 116 bytes. Shellcode exploit for linx86 platform / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...
Password File Obtained by HTTP (GET)
Binary data 1879.prm...
RHEL 2.1 : util-linux (RHSA-2002:137)
The util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The 'chfn' utility included in this package allows users...
CVE-2001-1412
CVE-2001-1412 affects MacOS X before 10.3 via the nidump utility. Local users can read the encrypted passwords from the password file by supplying passwd as a command line argument, indicating a failure in input handling and access control for that utility. The vulnerability’s impact is limited t...
NetInfo Arbitrary Remote File Access
Using NetInfo, it is possible to obtain the password file of the remote host by querying it directly. An attacker may use it to set up a brute-force attack to crack the passwords contained in the file, and then use the gained passwords to login into the remote host, either remotely or locally. C...
HP-UX "passwd" utility may corrupt password file
Overview The HP-UX "passwd" utility contains a denial-of-service vulnerability. Description The HP-UX "passwd" utility is used to make changes to a user's authentication credentials. A vulnerability in "passwd" may allow a local attacker to corrupt the password file. --- Impact An attacker may be...
Solaris in.lpd Crafted Job Request Arbitrary Remote Command Execution
The remote lpd daemon is vulnerable to an environment error that could allow an attacker to execute arbitrary commands on this host. Nessus uses this vulnerability to retrieve the password file of the remote host although any command could be executed. %NASLMINLEVEL 70300 C Tenable Network...
Guestbook tr3.a
Product : Guestbook tr3.a Version : First WebSite : http://www.planetmoon.net Problem : Viewing passwords file Description: ------------ In this script passwords are in passwd.txt file In Shrot, all who want see the passwords can make it. Exploit: -------- http://somehost/gbdir/files/passwd.txt...
WFGuestBook
Product : WFGuestBook Version : 1.1 WebSite : http://jid.2yd.ru Problem : Admin access rus Description: ------------ index.php ========= ... require "style.php"; require "lib.php"; $cr=chr13.chr10; $ap=file"pwd.dat"; ... ========= pwd.dat ======= 21232f297a57a5a743894a0e4a801fc3 ======= password ...
