CitadelUX 6.23 - Remote USER Directive

CitadelUX 6.23 - Remote USER Directive / Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com This is the version which contains targets,abuse it kiddies Bruteforce: You only have 4096/4=1024 tries. The magic offset lies about 2048 + or - 4,8,16....256 So practically speaking you have...

FreeBSD Ports : rsync < 2.6.2_2

The remote host has an old version of rsync installed. There is a flaw in this version of rsync which, due to an input validation error, would allow a remote attacker to gain access to the remote system. An attacker, exploiting this flaw, would need network access to the TCP port. Successful...

Arkoon Appliance Detection

The remote host has the three TCP ports 822, 1750, 1751 open. It's very likely that this host is an Arkoon security dedicated appliance with ports TCP/822 dedicated to ssh service TCP/1750 dedicated to Arkoon Manager TCP/1751 dedicated to Arkoon Monitoring Letting attackers know that you are usin...

CVE-2004-0714

Cisco Internetwork Operating System IOS 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports UDP 162 and a randomly chosen UDP port, which allows remote attackers to cause a denial of service device reload and memory corruption...

[HV-MED] DoS in Microsoft SMS Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Denial of Service DoS in Microsoft SMS Client Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200407141 Overview: ========= Microsoft Systems Management Server provides configuration management solution for Windows platform. It is...

FreeBSD Ports: phpBB < 2.0.8

The remote host has an old version of phpBB installed. phpBB is a PHP-based bulletin board. There is a cross-site scripting issue in the remote version of this software which may allow an attacker to damage the remote phpBB installation %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

FreeBSD Ports : nap < 1.4.5

The remote host has an old version of nap installed. This version of nap contains a security loophole which allows remote clients to access arbitrary files on the nap system. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg83119e275d7c11d880e30020ed76ef5a.nasl...

Korgo Worm Detection

Nessus found that TCP ports 113 and 3067 are open. The Korgo worm is known to open a backdoor on these ports. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 Note that Nessus did not try to talk to the backdoor, so this migh...

Linux kernel in/out ports access

Mask for input/output permissions is not cleared for child process. It may lead to unauthorized access to i/o ports...

Windows NT/2000/XP/2003 RPC buffer overflow

Multiple buffer overflows during RPC request parsing via TCP/135 and another RPC ports...

[Full-Disclosure] EEYE: Windows Local Security Authority Service Remote Buffer Overflow

Windows Local Security Authority Service Remote Buffer Overflow Release Date: April 13, 2004 Date Reported: October 8, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP Description: eEye Digital Security has discovered a remote buffer overflow i...

CVE-2003-0796

Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled...

CVE-2003-0796

The connected SGI advisory (SECURITYVULNS/DOC:5438) confirms a vulnerability in rpc.mountd on SGI IRIX 6.5.18–6.5.22 that permits mount requests from unprivileged ports even when -n is not allowed, potentially enabling unauthorized NFS mounting. The issue is associated with CAN-2003-0796; SGI’s r...

Microsoft Windows Media Services Remote Denial of Service Vulnerability

Description It has been reported that Microsoft Windows Media Services is prone to a remote denial of service vulnerability. This may allow an attacker to cause the services to effectively deny access to legitimate users by sending specially crafted TCP/IP packets on TCP ports 7007 and/or 7778...

Alcatel Omniswitch 7000 series

Running Nessus 2.0.9 against Alcatel 7000 series causing a swith to reboot via buffer overflow?. Alcatel has multiple services running on the background, with no option to shut them down. Vulnerable ports: 80, 260, 261, 443. Disabling a service via qos policy suggested by Alcatel does just a mino...

Microsoft Windows Internet Naming Service (WINS) fails to properly validate the length of specially crafted packets

Overview Microsoft Windows Internet Naming Service WINS fails to properly validate the length of specially crafted packets which could allow an unauthenticated, remote attacker to cause a denial-of-service condition. Description The Windows Internet Naming Service WINS maps IP addresses to NETBIO...

Vulnerabilities in H.323 implementations

The NISCC and the OUSPG developed a test suite for the H.323 protocol. This test suite has uncovered vulnerabilities in several H.323 implementations with impacts ranging from denial-of-service to arbitrary code execution. In the FreeBSD Ports Collection, pwlib' is directly affected. Other...

CVE-2003-1473

Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable...

[Full-Disclosure] rpc.mountd Vulnerabilities on SGI IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.mountd Vulnerabilities Number: 20031102-01-P Date: November, 21 2003 Reference: SGI BUG 897521, CVE CAN-1999-1225 Reference: SGI BUG 897523, CVE CAN-2003-0796 Reference: SGI BUG 898361, CVE CAN-2003-0797 Fixed in: Future release ...

kpopup.txt

A local root vuln exists in Kpopup version 0.9.1latest and proberly all other versions. It is avaliable from http://www.henschelsoft.de/kpopupen.html main site http://www.freebsd.org/ports/net.html and many other places if you search kpopup on google. I. BACKGROUND Kpopup is a KDE program for...