814 matches found
Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service
Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service source: https://www.securityfocus.com/bid/5902/info Oracle 9i Application Server 9iAS allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. Whe...
Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service
source: https://www.securityfocus.com/bid/5902/info Oracle 9i Application Server 9iAS allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. When a custom request is sent to the Web Administration module, the module may react...
CVE-2002-1069
The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...
CVE-2002-1069
The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...
CVE-2002-1069
CVE-2002-1069 concerns the D-Link DI-804 router (firmware 4.68). The weakness allows remote attackers to bypass authentication via direct access to web pages (release.htm, Device Status, Device Information) and perform actions such as releasing DHCP addresses or retrieving sensitive data. The und...
Ruslan Communications <Body>Builder - Authentication Bypass
source: https://www.securityfocus.com/bid/5008/info Ruslan Communications Builder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java. Reportedly, user input supplied as the login password is not...
CVE-2002-0537
The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...
Back Office Web Administrator Authentication Bypass (#NISR17042002A)
NGSSoftware Insight Security Research Advisory Name: Back Office Web Administration Authentication Bypass Systems Affected: Microsoft's Back Office Web Administrator 4.0, 4.5 Severity: Medium/High Vendor URL: http://www.microsoft.com Author: David Litchfield [email protected] Date: 17th April...
CVE-1999-1105
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...
CVE-1999-1105
CVE-1999-1105 affects Windows 95 when Remote Administration and File Sharing for NetWare Networks is enabled. The vulnerability arises because a share (C$) is created upon remote administrator login, enabling a remote attacker to read arbitrary files by mapping the network drive. The available so...
CVE-1999-0380
CVE-1999-0380 affects SLMail 3.1 and 3.2. When Remote Administration Service (RAS) is enabled, an attacker can point a user’s Finger File to a target file and, after running finger, access NTFS files locally. The underlying cause is the Finger service handling a user file reference insecurely, en...
CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...
Timbuktu DoS vulnerabilty
Timbuktu 6.0.1 and Older DoS Advisory Discovered by: Teknophreak of Malloc E-mail: [email protected] "Timbuktu" is a remote administration suite that is available for MacOS and Windows operating systems. Timbuktu utilizes a range of ports between 1417 - 1420. There exist a Denial of Service...
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of...
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service
source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of administrative tasks, including full remote access to the user's...
BOOZT! Standard 's administration cgi vulnerable to buffer overflow
BOOZT! is a banner management software for linux servers. It has a remote administration system based on web. I played with version 0.9.8alpha. Here is a reproduction of the bug: http://127.0.0.1:8080/cgi-bin/boozt/admin/index.cgi?section=5&input=1 Fill the "Name Field" with enough A's 770 was be...
webmin 0.91 - Directory Traversal
source: https://www.securityfocus.com/bid/3698/info Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms, you can setup user accounts, Apache, DNS, file sharing and so on. Webmin will run on most Unix variants, providing it has been...
CVE-2001-1463
The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...
RhinoSoft Serv-U remote administration client transmits password in plaintext
Overview A vulnerability exists in the remote administration client for RhinoSoft Serv-U. During the authentication process, the client ignores the S/KEY one-time password OTP challenge sent by the server and sends the password entered by the user in plaintext. Description RhinoSoft Serv-U is a...
Telnet DoS Vulnerability in Marconi ATM Switch Software
INTRO: Marconi ATM switches can be configured with IP addresses for remote administration via telnet and web interfaces. There is a bug that can be used to deny telnet access to the switch, the web interface does not appear vulnerable and console management is unaffected. HISTORY:...