896 matches found
HP-UX Update for the CIFS Server HPSBUX01062
Check for the Version of the CIFS Server OpenVAS Vulnerability Test HP-UX Update for the CIFS Server HPSBUX01062 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
FreeBSD : ProFTPD ASCII translation bug resulting in remote root compromise (cf0fb426-3f96-11d8-b096-0020ed76ef5a)
A buffer overflow exists in the ProFTPD code that handles translation of newline characters during ASCII-mode file uploads. An attacker may exploit this buffer overflow by uploading a specially crafted file, resulting in code execution and ultimately a remote root compromise. %NASLMINLEVEL 70300 ...
FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit
Exploit for freebsd platform in category local exploits ==================================================================== FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit ==================================================================== FreeBSD 7.0-RELEASE telnet daemon...
FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit
No description provided by source. FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible...
FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation
FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, wha...
CVE-2009-0171
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...
Multiple XSRF in DD-WRT (Remote Root Command Execution)
Author: Michael Brooks !!!! I usually don't like posting my leet exploits to bugtraq because it is so unprofessional. You guys usually malform my exploits so they are totally useless, even to someone trying to write a patch! You also tend to get the wrong name! Michael Brooks wrote this! Exploits...
DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit
No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...
DD-WRT v24-sp1 - Cross-Site Reference Forgery
Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage: http://dd-wrt.com/ Impact: 1Remote root...
DD-WRT v24-sp1 - Cross-Site Reference Forgery
DD-WRT v24-sp1 - Cross-Site Reference Forgery Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product...
Applications can open up remote root access on G1 Phone
Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...
Solaris 9 [UltraSPARC] sadmind Remote Root Exploit
No description provided by source. !/usr/bin/perl holygrail2 --------------------------------------------------------------------------------- SunOS 5.9 UltraSPARC sadmind Remote Root Exploit by KingCope in 2008 Most of work was shamelessy ripped from HD-Moore and RISE-Security exploits!!! Bug...
Solaris 9 [UltraSPARC] sadmind Remote Root Exploit
Exploit for solaris platform in category remote exploits ================================================== Solaris 9 UltraSPARC sadmind Remote Root Exploit ================================================== !/usr/bin/perl holygrail2...
Drcat 0.5.0-beta (drcatd) Remote Root Exploit
No description provided by source. / Proof of Concept DRCATD Remote exploit by Taif Test: root@localhost drcat ./drcat -d 127.0.0.1 -u taif -p test Public code by Taif drcat-0.5.0-beta 'remote r00t' proof Bug found by Khan Shirani host: +-+-+-+-+-+-+-+ 127.0.0.1 |C|L|U|P|C|S|R| user:...
Webmin and Usermin authentication bypass vulnerability
Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...
Immunity Canvas: SOL_PRINTER_CONF
Name| solprinterconf ---|--- CVE| CVE-2008-2144 Exploit Pack| CANVAS Description| solprinterconf Notes| CVE Name: CVE-2008-2144 VENDOR: Sun Advisory: http://sunsolve.sun.com/search/document.do?assetkey=1-66-236884-1 Notes: This exploit gets remote root on Solaris servers given a working printer...
Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit (meta)
No description provided by source. / \ / \ | | | | ----====/ /\/ /\ | || |====---- | | | || | | | | | | | | | | | | |...
Aztech ADSL2/2+ 4 Port remote root
http://www.aztech.com cat versions VERSION=3.7.0 BUILD=070426 BOARD=AR7RD FSSTAMP=20070426171252 Example: $ lynx "http://192.168.0.5/cgi-bin/script?system20&20whoami" --source root $ lynx "http://192.168.0.5/cgi-bin/script?system20&20ls /" --source bin dev etc lib proc sbin usr var var.tar $...
ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability
Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID 28184 ---------------------------...
ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability
No description provided by source. Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID...