Microsoft Windows 9xME - Share Level Password Bypass (1)

Microsoft Windows 9xME - Share Level Password Bypass 1 source: https://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows...

Дырка в eTrust Access Control (SeOS)

Для удаленного администрирования используется rlogin-подобный протокол без авторизации с паролем, что позволяет атаки из локальной сети...

telsrv.txt

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: Prizm Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with the ability to remotel...

McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password

McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password source: https://www.securityfocus.com/bid/1153/info Within cart32.exe, entering any password by way of http://target/scripts/cart32.exe/cart32clientlist, a remote user could obtain vital client information such as usernam...

CVE-2000-0257

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

Novell Netware 5.1 - Remote Administration Buffer Overflow

Novell Netware 5.1 - Remote Administration Buffer Overflow source: https://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, a...

Novell Netware 5.1 - Remote Administration Buffer Overflow

source: https://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, and if sent a GET request of between 4 and 8 kb, some of the...

Novell Netware 5.1 (server 5.00h, Dec 11, 1999)...

Hi again. Another overflow and TCP/IP stack flaw. Affected: virtually any system running on the top of Netware system with http remote administration including web caching solutions, BorderManager firewall and so on... There's an buffer overflow in remote http, usually on port 8008 or so...

vqserver /........../

Version tested: vqserver 1.9.9 for windows The webserver vqserver follows /........../ in requests. http://host/........../autoexec.bat gives the autoexec.bat file. More serious, http://host/........../some/path/vq/server/cfg/server.cfg where /some/path/ could be anything, but normally...

checkpoint-fw1.vuln.txt

There are two vulnerabilities in FW-1. The first is an authentication issue, the other is a configuration issue. Since I don't have a copy of 4.x FW-1 handy maybe someone can check it for me. 1 The basic authentication used in Checkpoint FW-1 used for inside/outbound and outside/inbound allows...

AltaVista Search Intranet 2.0 b/2.3 - Directory Traversal

source: https://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all documents in the 'http' directory one level up. These...

Fortech Proxy+ 2.30 - Remote Administration

Fortech Proxy+ 2.30 - Remote Administration source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default whic...

Fortech Proxy+ 2.30 - Remote Administration

source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can accomodate for anonymous packet...

symantec mail-gear 1.0 - Directory Traversal

symantec mail-gear 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/827/info Mail-Gear, a multi-purpose filtering email server, includes a webserver for remote administration and email retrieval. This webserver is vulnerable to the '../' directory traversal attack. By including...

Alt-N MDaemon 2.8.5 - WebConfig Overflow Denial of Service

source: https://www.securityfocus.com/bid/820/info The Mdaemon mail server for Windows includes a small web server for web-based remote administration. This webserver is vulnerable due to an unchecked buffer that handles incoming GET requests. An abnormally large URL sent to the WebConfig service...

XtraMail Control Service Username Overflow

The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. XtraMail includes a remote administration utility which listens on port 32000 for logins. Providing a username of over 15,000 characters causes a buffer overflow, which could allow a remote attacker to...

Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (1)

Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow 1 source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration...

Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the correct port must be specified and a...

Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)

Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow 2 // source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administratio...

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 - 'Services.exe' Denial of Service (1)

source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the "services" executable, which in turn, disables the ability for the...