364 matches found
Exploit for Totalbill...
Totalbill is a complete billing and provisioning system for ISPs, and it's written by Aptis Software www.aptissoftware.com. There is one part of it that sits on your mail and radius servers called Sysgen that listens on a port sometimes 9998, but it usually varies, and it allows the incoming...
Redhat Linux 6.x remote root exploit
Hi, Included below is an exploit for the recently exposed linux rpc.statd format string vulnerability0. I have tailored it towards current Redhat Linux 6.x installations. It can easily be incorporated into attacks against the other vulnerable Linux distributions. I am not a security expert, but...
FreeBSD-SA-00:33.kerberosIV
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:33 Security Advisory FreeBSD, Inc. Topic: kerberosIV distribution contains multiple vulnerabilities under FreeBSD 3.x Category: core Module: kerberosIV Announced:...
Удаленный root через ftpd в OpenBSD
Ошибка "форматной строки" полностью аналогичная ошибке в wu-ftpd...
FreeBSD-SA-00:30.openssh
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:30 Security Advisory FreeBSD, Inc. Topic: OpenSSH UseLogin directive permits remote root access Category: core Module: openssh Announced: 2000-07-05 Credits: Markus Fried...
WU-FTPD site_exec() Function Remote Format String
The version of WU-FTPD hosted on the remote server does not properly sanitize the argument of the SITE EXEC command. It may be possible for a remote attacker to gain root access. This script was written by Alexis de Bernis Changes by Tenable: - rely on the banner if we could not log in - changed...
WuFTPD: Providing *remote* root since at least1994
/ - wuftpd2600.c VERY PRIVATE VERSION. DO NOT DISTRIBUTE. 15-10-1999 WUFTPD 2.6.0 REMOTE ROOT EXPLOIT by tf8 NOTE: For ethical reasons, only an exploit for 2.6.0 will be released 2.6.0 is the most popular version nowadays, and it should suffice to proof this vulnerability concept. Site exec was...
Gauntlet Firewall 4.1/4.2/5.0 / Webshield E-ppliance 100.0/300.0 / IRIX 6.5.x - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was integrated, a vulnerability was...
CVE-1999-0822
Buffer overflow in Qpopper qpop 3.0 allows remote root access via AUTH command...
CVE-1999-0822
Buffer overflow in Qpopper qpop 3.0 allows remote root access via AUTH command...
CVE-1999-0353
CVE-1999-0353 concerns HP-UX rpc.pcnfsd, where improper handling of the main printer spool directory permissions allowed remote root access. Affected software is HP-UX on the s700/s800 series (11.x) per patch references. The root cause is described in patches noting that rpc.pcnfsd has an error i...
CVE-1999-0353
rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory...
FreeBSD_FTP_port_holes.txt
Subject: [email protected]: FreeBSD Security Advisory: FreeBSD-SA-99:03.ftpd REISSUED To: [email protected] [email protected] 2.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xBE7497F1 Signed: 9/15/99 11:30:30 PM...
ProFTPd 1.2 pre6 - snprintf Remote Root
ProFTPd 1.2 pre6 - snprintf Remote Root source: https://www.securityfocus.com/bid/650/info Lack of user input validation in ProFTPD can lead to a remote root vulnerability. On systems that support it ProFTPD will attempt to modify the name of the program being executed argv0 to display the comman...
FreeBSD-SA-99:03.ftpd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:03 Security Advisory FreeBSD, Inc. Topic: Three ftp daemons in ports vulnerable to attack. Category: ports Module: wu-ftpd and proftpd Announced: 1999-09-05 Reissued:...
CVE-1999-0692
The default configuration of the Array Services daemon arrayd disables authentication, allowing remote users to gain root privileges...
SGI Advanced Linux Environment 3.0 / SGI IRIX 6.5.4 / SGI UNICOS 10.0 6 - arrayd.auth Default Configuration
/ source: https://www.securityfocus.com/bid/530/info The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is part of the arrayservices5 and is known as the array services daemon. The default configuration for...
Linux FTP Server Backdoor Detection
There is a backdoor in the old FTP daemons of Linux that allows remote users to log in as 'NULL' with password 'NULL'. These credentials provide root access. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10080; scriptversion "1.27"; scriptcvsdate"Date: 2018/06/13...