Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authenticatio...

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal

source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous users remote adminitration of the...

cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion

cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion source: https://www.securityfocus.com/bid/10468/info cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by...

LinkSys WRT54G administration page availble to WAN

Manufacturer: LinkSys a division of Cisco Product: Wireless-G Broadband Router Model: WRT54G Product Page: http://www.linksys.com/products/product.asp?grid=33&scid=35&prid=601 Firmware tested: v2.02.7 In a recent client installation I discovered that even if the remote administration function is...

[NEWS] SMC Routers Passwordless Remote Administration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SMCwhoops.txt

Tested Model: 7008ABR part number 750.9814 with firmware 1.032 installed Confirmed by another person on: 7004VBR version 1, firmware 1.231 Others may be vulnerable. SMC broadband routers ship with remote administration enabled by default on their port 1900 on the WAN side of the router. If you ju...

CVE-2004-1976

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900...

Cisco default install of IBM Director agent fails to authenticate users for remote administration

Overview Cisco IBM Director agent fails to authenticate users for remote administration. Description Cisco voice products e.g. CallManager, IP Interactive Voice Response, IP Call Center Express that run on IBM servers install IBM Director agent to provide administrative management. The default...

phpBB 2.0.4 - PHP Remote File Inclusion

phpBB 2.0.4 - PHP Remote File Inclusion // / phpBB 2.0.4 Remote AdminStyles.PHP ThemeInfo.CFG File Include / / / / Exploit made on June 2003 by Spoofed Existence / / / / Patch : http://www.phpbb.com/phpBB/viewtopic.php?t=113826 / // include include include include include int main //The socket...

ST FTP Service v3.0 - Unauthorized access, DOS + exploit

Hi, vuln, security team www.rst.bb1.ru RusH security team --= Advisory 8 =-- Product: ST FTP Service v3.0 Author: http://stsoft.newmail.ru Vuln: Unauthorized access, DOS Bug found: 14.05.2003 by 1dt.w0lf ST FTP Service - ftp server для win98,NT Поддерживает основной набор FTP-команд, докачку в об...

Kerio Personal Firewall vulnerable to replay attack

Overview Kerio Personal Firewall contains a vulnerability that may allow a remote attacker to replay an administration session. Description Kerio Technologies Inc. describes the Kerio Personal Firewall as follows:Kerio Personal Firewall KPF is a software agent that builds a barrier between your...

Kerio Personal Firewall vulnerable to buffer overflow

Overview Kerio Personal Firewall contains a buffer overflow that may allow a remote attacker to execute arbitrary code. An exploit for this vulnerability is publicly available. Description Kerio Technologies Inc. describes the Kerio Personal Firewall as follows:Kerio Personal Firewall KPF is a...

Check Point FireWall-1 Open Web Administration

The remote Check Point FireWall is open to Web administration. An attacker can use it to launch a brute-force password attack against the firewall, and eventually take control of it. This script was written by Matthew North Checks to see if remote Check Point FireWall is open to Web administratio...

Battlefield 1942 DoS

By sending a specially crafted packet to the bf1942-server remote administration port, an attacker can cause the server to crash...

[VSA0307] Battlefield 1942 remote DoS

void.at Security Advisory VSA0307 - mailto:crew at void dot at Battlefield 1942 is a game c by Electronic Arts1. Overview ======== By sending a specially crafted packet to the bf1942-server remote administration port, an attacker can cause the server to crash. It could even be possible to remotel...

Electronic Arts Battlefield 1942 1.2/1.3 - Remote Administration Authentication Buffer Overflow

// source: https://www.securityfocus.com/bid/6967/info It has been reported that Battlefield 1942 does not properly check input sent to the administration port of a game server. By sending a string of excessive length, a remote attacker could crash the server, resulting in a denial of service. A...

Electronic Arts Battlefield 1942 1.21.3 - Remote Administration Authentication Buffer Overflow

Electronic Arts Battlefield 1942 1.21.3 - Remote Administration Authentication Buffer Overflow // source: https://www.securityfocus.com/bid/6967/info It has been reported that Battlefield 1942 does not properly check input sent to the administration port of a game server. By sending a string of...

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface source: https://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access...

Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface

source: https://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access. There is no option to enable any authentication requirement. script function...

CVE-2002-2159

Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access...