2872 matches found
Thomson TCW690 - POST Password Validation
Thomson TCW690 - POST Password Validation / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password...
HP-UX PHCO_27373 : HPSBUX0208-210 Sec. Vulnerability in VVOS passwd(1) (rev. 2)
s700800 11.04 VVOS cumulative passwd1 patch : Unexpected behavior using passwd1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27373. The text itself is copyright C Hewlett-Packard Development Company, L....
CVE-2004-0980
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code...
Winamp < 5.0.8c Multiple Unspecified Vulnerabilities
The version of Winamp installed on the remote host has various unspecified vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. An attacker may exploit these flaws by sending malformed files to a victim on the remote host. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-2386
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function...
CVE-2004-1383
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the 1 order, 2 projectid, 3 promain, or 4 hoursid parameters to index.php or 5 ticketid to viewticketdetails.php...
[SA13468] Ethereal Multiple Vulnerabilities
TITLE: Ethereal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13468 VERIFY ADVISORY: http://secunia.com/advisories/13468/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Ethereal 0.x http://secunia.com/product/1228/ DESCRIPTION: Multiple vulnerabilities have be...
PHPKIT SQL Injection, XSS
Author: Steve Date: November 22, 2004 Affected Software:PHP KIT Software Version: 1.6.03 - 1.6.1 Software URL: http://www.phpkit.de Attack: SQL Injection, allowing people to manipulate the query into pulling data. XSS What is PHPKIT: PHPKIT is a modular developed Homepage Software which can simpl...
Debian DSA-202-1 : im - insecure temporary files
Tatsuya Kinoshita discovered that IM, which contains interface commands and Perl libraries for E-mail and NetNews, creates temporary files insecurely. - The impwagent program creates a temporary directory in an insecure manner in /tmp using predictable directory names without checking the return...
Debian DSA-281-1 : moxftp - buffer overflow
Knud Erik Hojgaard discovered a vulnerability in moxftp and xftp respectively, an Athena X interface to FTP. Insufficient bounds checking could lead to execution of arbitrary code, provided by a malicious FTP server. Erik Tews fixed this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[VulnWatch] OpenBSD radius authentication vulnerability
Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...
Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577 HTTP Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. %NASLMINLEVEL 70300 This script was written by Michael J. Richardson...
[SA12374] ignitionServer "SERVER" Denial of Service Vulnerability
TITLE: ignitionServer "SERVER" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12374 VERIFY ADVISORY: http://secunia.com/advisories/12374/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: ignitionServer 0.3.x http://secunia.com/product/3565/ ignitionServer 0.2.x...
Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities
Binary data 1996.prm...
wdExec.txt
Williams Database Page Parser File: page.pl Version: 1.0 Author: Neil Thompson Web: www.williamsdb.com Exploit: www.host.com/page.pl?page=|id| ThankS All : Infektion Group...
12Planet Chat Server 2.9 - Cross-Site Scripting
12Planet Chat Server 2.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10659/info It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data. The problem presents itself when...
Linksys Web Camera Software 2.10 - 'Next_file' File Disclosure
source: https://www.securityfocus.com/bid/10476/info It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files. Linksys Web Camera software version 2.10 is reportedly prone to this issue, however...
NetChat HTTP Server Stack Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetChat HTTP Server Stack Overflow RELEASE DATE: May 16, 2004 DATE REPORTED: May 12, 2004 RISK: Medium IMPACT: Attackers may be able to execute arbitrary code with the privileges of the user running the applicaton. VERSIONS: = 7.3 OVERVIEW: NetChat is...
Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection
Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issue...
Clients broadcast buffer overflow in Red Faction <= 1.20
Luigi Auriemma Application: Red Faction http://www.redfaction.com Versions: = 1.20 Platforms: Windows, MacOS Bug: broadcast client buffer overflow Risk: highly critical Exploitation: remote and automatic, versus clients Date: 01 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...