Noguska Nola 1.1.1 [ Intranet Business Management Software ]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Noguska Nola 1.1.1 Intranet Business Management Software .: Software Desciption :. - - compied from their site - Redefining the scope of Enterprise Software The NOLA web based software package allows your business to effortlessly reach further than...

Cisco Secure ACS Unix Acme.server Information Disclosure Vulnerability

...

DPGS allows any file to be overwritten

Taken from the scripts website: "WARNING: DPGS is no longer maintained and is thus discontinued. If you would like to take over its development, email me. - July 30, 2000" This is the reasoning to why I did not contact the author prior to this email. This is an example of how bad input filtering...

JRun Multiple Sample Files Remote Information Disclosure

This host is running the Allaire JRun web server and has sample files installed. Several of the sample files that come with JRun contain serious security flaws. An attacker can use these scripts to relay web requests from this machine to another one or view sensitive configuration information as...

Multiple Vendor Embedded FTP Service Any Username Authentication Bypass

The FTP server running on the remote host can be accessed using a random username and password. Nessus has enabled some countermeasures to prevent other plugins from reporting vulnerabilities incorrectly because of this. This script was written by H D Moore include"compat.inc"; ifdescription...

SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw

Imap-uw allows user to access any file he could access locally. It's not a bug it's insecurity by design. According to vendor's web FAQ it's not pointed in FAQ inside program distribution: -=-=-=-=-=-=- 5.1 I see that the IMAP server allows access to arbitary files on the system, including...

CGI bugs

No description provided...

Microsoft Windows 2000 Event Viewer contains buffer overflow

Overview The Windows 2000 event viewer contains a buffer overflow. Description The Microsoft Windows 2000 event viewer contains a buffer overflow that can be exploited when a record written to an event log is examined by the event viewer. Both privileged and unprivileged users can read and write ...

HTTP proxy default configurations allow arbitrary TCP connections

Overview Multiple vendors' HTTP proxy services use insecure default configurations that could allow an attacker to make arbitrary TCP connections to internal hosts or to external third-party hosts. Description HTTP proxy services commonly support the HTTP CONNECT method, which is designed to crea...

mod_python imported modules inderect calls

It's possible to inderectly call unsafe function via imported module...

Microsoft IIS Vulnerabilities in Cisco Products - MS02-018

...

Multiple Web Server on Windows MS/DOS Device Request Remote DOS

It was possible to freeze or reboot Windows by reading a MS/DOS device through HTTP, using a file name like CON\CON, AUX.htm, or AUX. An attacker could exploit this flaw to deny service to the affected system. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Securit...

SunSolve CD cgi scripts...

Sun never responded to this mail so I guess they don't consider the bug too be serious ... could be worth mentioning though. ----- Forwarded message from Fyodor [email protected] ----- Date: Sat, 16 Jun 2001 23:24:45 +0700 From: Fyodor [email protected] To: [email protected] Subject:...

Oracle 9iAS SOAP components allow anonymous users to deploy applications by default

Overview Oracle Application Server 9iAS installs with Simple Object Access Protocol SOAP enabled by default and allows unauthenticated remote users to deploy and undeploy SOAP services and providers. Description Oracle Application Server 9iAS supports Simple Object Access Protocol SOAP, an...

Oracle 9iAS default configuration uses well-known default passwords

Overview Oracle Database Server version 9iAS installs with up to 160 distinct default login accounts. The usernames and passwords for these have been made publicly available and could be used by an attacker to gain access to an Oracle server. Description Depending on the components chosen at...

Malformed SNMP Message-Handling Vulnerabilities for Cisco Non-IOS Products

...

Oracle 9iAS Java Process Manager /oprocmgr-status Anonymous Process Manipulation

The remote host is an Oracle 9iAS server. By default, accessing the location /oprocmgr-status via HTTP lets an attacker obtain the list of processes running on the remote host, and even to to start or stop them. %NASLMINLEVEL 70300 This script was written by Matt Moore Script audit and...

Linksys 'routers', SNMP issues

Howdy. LinkSys DSL 'routers' have some serious information leakage, and potention DDoS usage. The following models have been confirmed as having this problem: BEFN2PS4 EtherFast Cable/DSL Router & Voice with 4-Port Switch BEFSR81 EtherFast Cable/DSL Router with 8-Port Switch Querying these device...

CVE-2001-1535

...

mIRC bug?

Hello, BugTraq readers! I have recently started using mIRC's DDE feature, which allows DDE messaging between its instances and other software. At first I was quite pleased with this feature until I thought about the security implications of it under a multi-user system such as Windows 2000...