2902 matches found
os-fingerprinting.txt
Date: Mon, 28 Dec 1998 16:16:40 -0700 From: David G. Andersen To: [email protected] Subject: A few more fingerprinting techniques - time and netmask The release of nmap reminded me about some work I did a while ago for yet-more-information-gathering-programs, and I thought it might be...
baystack.switch.passwd.txt
Date: Wed, 10 Mar 1999 14:48:58 -0800 From: Jan B. Koum To: [email protected] Subject: Default password in Bay Networks switches. Ok.. so you would think after 3Com $%& up last year of inserting default password into firmware vendors would learn their lesson? See...
hack_wsftp.txt
Hacking WS FTP.INI ------------------ http://4n4rchy.hypermart.net by, Netherpunk, Anarchist Rampage Inc. I pretty much stumbled onto this bug by myself. Others have probably found it before me, so I'll let you decide. I actually rewted a few web servers with this thing, so it can be pretty usefu...
wu-ftpd-beta18-root.txt
ate: Tue, 23 Mar 1999 09:09:11 +0000 From: duke To: [email protected] Subject: Re: ftp exploit hi, this code i wrote demonstrated a vulnerability that is already widely known, and as indicated in the comments is was private... there is nothing to be gained from posting this here and furthermor...
excel.macro.virus.protect.txt
Date: Mon, 29 Mar 1999 12:51:09 -0500 From: rotaiv To: [email protected] Subject: Bypassing Excel Macro Virus Protection -----BEGIN PGP SIGNED MESSAGE----- With the sudden attention macro viruses have received over the weekend, I thought I would share a couple of items I find concerning with...
iis4.0+visual-interdev.txt
Date: Mon, 18 Jan 1999 11:58:06 -0800 From: Adam Berns To: [email protected] Subject: IIS4.0 and Visual Interdev Using Visual Interdev 6.0, I can connect to an IIS 4.0 Server without being asked for any security passwords. The server is running IIS4.0, with Service Pack 4, with the...
netscape4.5-applets.txt
Date: Tue, 2 Feb 1999 13:42:32 -0800 From: Giao Nguyen To: [email protected] Subject: Unsecured server in applets under Netscape Just for kicks, I wrote a sample applet that listened on a socket. I discovered that when the applet was loaded under Netscape as tested with version 4.5, any hosts...
bios-backdoors.txt
Date: Tue, 3 Nov 1998 13:22:20 -0600 From: Paul L Schmehl To: [email protected] Subject: BIOS Backdoor Passwords I've been out of the office since posting the comments about the ineffectiveness of BIOS passwords, and I returned to find to my surprise numerous requests for informati...
sshd-DoS.txt
Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Maybe some sshd 1.x/2.0 stupidities: ------------------------------------ Unprivledged luser could create symlink in /.ssh or /.sshd to virtually any fil...
iis.4.0.metabase.passwd.txt
Date: Mon, 22 Feb 1999 11:26:41 +0100 From: Patrick CHAMBET To: [email protected] Subject: Alert: IIS 4.0 metabase can reveal plaintext passwords Hi all, We knew that Windows NT passwords are stored in 7 different places across the system. Here is a 8th place: the IIS 4.0 metabase. IIS 4.0 uses its...
aol-aim-tunnel.txt
The risks of using an AOL client behind a firewall Many users wish to use AOL client or AIM AOL Instant Messenger behind the company firewall. However, opening the firewall for an AOL client can present a security risk to the entire network. AOL client connects to the AOL server at port 5190. Thi...
windows.backdoors.txt
Date: Fri, 19 Feb 1999 20:02:46 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Vulnerability Alert: Windows Backdoors Update II TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any...
X11.tmp.txt
Date: Mon, 2 Nov 1998 23:04:43 +0100 From: Pavel Kankovsky To: [email protected] Subject: X11 cookie hijacker drwxrwxrwx 2 root root 1024 Oct 30 19:57 /tmp/.X11-unix Hang on, aren't those dangerous permissions? Pretty dangerous. Shall I look for my old cookie hijacker? Please post the bloody...
Microsoft IIS /scripts Directory Browsable (deprecated)
The /scripts directory is browsable. This gives an attacker valuable information about which default scripts you have installed and also whether there are any custom scripts present that may have vulnerabilities. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsabl...
CVE-1999-0497
Anonymous FTP is enabled...
CVE-1999-0568
rpc.admind in Solaris is not running in a secure mode...
CVE-1999-0561
IIS has the exec function enabled for Server Side Include SSI files...
CVE-1999-0547
An SSH server allows authentication through the .rhosts file...
