minihttp.txt

Minihttpserver 1.x Host Engine Flaws Url: http://www.minihttpserver.net + File-Sharing for NET: "File Sharing for net is a complete, secure web server that shares your business documents and files over the web: remote users only need browsers to view your files. Share, transfer files securely wit...

CVE-2003-0773

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf...

Citadel/UX BBS 6.07 - Remote Overflow

/ Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 define RET 0xbfffaf20 define CITADELPORT...

Axis Network Camera 2.x - HTTP Authentication Bypass

Axis Network Camera 2.x - HTTP Authentication Bypass source: https://www.securityfocus.com/bid/7652/info A vulnerability has been discovered in various Axis Communications products. By making a request for a specially formatted URL, it may be possible for remote users to access the administrative...

badblue052003.txt

BadBlue Remote Administrative Access Vulnerability I. Synopsis Affected Systems: BadBlue 1.7 BadBlue 2.0 BadBlue 2.1 BadBlue 2.2 Immune Systems: BadBlue 2.3 NOTE: BadBlue 1.6 and prior may be impacted; these systems were not tested. Risk: High Remote LocalSystem Compromise Vendor URL:...

BadBlue ISAPI Extension ext.dll LoadPage Parameter Arbitrary File Access

The remote host is running BadBlue web server earlier then 2.3. Such versions are reportedly affected by an authentication bypass vulnerability. A flaw in the order that security checks are performed could allow an attacker to gain administrative access to the application. C Tenable Network...

BadBlue ISAPI Extension .hts Crafted File Extension Request Authentication Bypass

The remote host is running the BadBlue web server earlier than 2.2. Such versions are reportedly affected by an authentication bypass vulnerability. It is possible for an attacker to gain administrative access using a filename with a .ats extension instead of a .hts extension. C Tenable Network...

CVE-2002-0267

preferences.php in Simple Internet Publishing System SIPS before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file...

CVE-2002-1558

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet...

Microsoft Windows Administrator Default Password Detection (W32/Deloder Worm Susceptibility)

W32/Deloder is a worm that tries to connect to a remote share by using a list of built-in administrator passwords. Nessus was able to connect to this host with one of these credentials. The worm W32/Deloder may use it to break into the remote host and upload infected data in the remote shares. C...

AutomatedShops WebC 2.0/5.0 Script - Name Remote Buffer Overrun

// source: https://www.securityfocus.com/bid/7268/info It has been reported that a boundary condition error exists in WebC. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable host. / AutomatedShops WebC 2.011 - 5.005 remote exploit. By Carl Livit...

Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions of 'login' descended from System ...

CVE-2002-2380

NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic...

CVE-2002-2077

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session...

CVE-2002-1718

Microsoft Internet Information Server IIS 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension FPSE file, as claimed using an HTTP request for colegal.htm that contains .. dot dot sequences...

CVE-2002-2353

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests...

CVE-2002-1835

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device...

MyPHPSoft MyPHPLinks 2.1.92.2 - SQL Injection Administration Bypassing

MyPHPSoft MyPHPLinks 2.1.92.2 - SQL Injection Administration Bypassing source: https://www.securityfocus.com/bid/6395/info MyPHPLinks is a freely available, open source PHP application distributed by MyPHPSoft. It is available for Unix, Linux, and Microsoft Windows operating systems. It has been...

Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: wwwoffled remote access vulnerability Advisory number: CSSA-2002-048.0 Issue date: 2002 November 18 Cross reference: 1. Problem...

CVE-2002-0815

The Javascript "Same Origin Policy" SOP, as implemented in 1 Netscape, 2 Mozilla, and 3 Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the...