win32 telnetbind by winexec 111 bytes

Exploit for win32 platform in category shellcode ===================================== win32 telnetbind by winexec 111 bytes ===================================== ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services...

CVE-2009-0641

systerm.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client,...

FreeBSD Security Advisory (FreeBSD-SA-09:05.telnetd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:05.telnetd.asc ADV FreeBSD-SA-09:05.telnetd.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:05.telnetd.asc Authors: Thomas Reinke Copyright: Copyright c 200...

FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit

No description provided by source. FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible...

FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit

Exploit for freebsd platform in category local exploits ==================================================================== FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit ==================================================================== FreeBSD 7.0-RELEASE telnet daemon...

[Full-disclosure] FreeBSD zeroday

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, wha...

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

Default Password (password) for 'admin' Account

The account 'admin' on the remote host has the password 'password'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "password";...

CVE-2008-6096

Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...

CVE-2008-6096

Juniper ScreenOS prior to 5.4.0r10, 6.0.0r6, and 6.1.0r2 is vulnerable to cross-site scripting due to improper sanitization of user input on the web interface and telnet login pages. The issue allows an attacker to inject arbitrary script via the username field on login, potentially affecting use...

Default Password (password) for 'admin' Account on Broadcom BCM96338 ADSL Router

The remote host is a Broadcom BCM96338 ADSL router, and its 'admin' account uses the password 'password'. An attacker may leverage this issue to gain administrative access to the affected system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35621; scriptversion...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-5.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

CoolPlayer 2.19 - PlaylistSkin Local Buffer Overflow

CoolPlayer 2.19 - PlaylistSkin Local Buffer Overflow !/usr/bin/perl coolplayerbof.pl Jeremy Brown [email protected]/jbrownsec.blogspot.com CoolPlayer BUILD 219 'PlaylistSkin' Buffer Overflow Exploit http://coolplayer.sourceforge.net TCP 0.0.0.0:4444 0.0.0.0:0 LISTENING C:\Documents and...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-4.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

Linksys WAG54G v2 Wireless ADSL Router - HTTPd Denial of Service

nmap 192.168.1.1 Starting Nmap 4.20 http://insecure.org at 2008-12-12 12:17 EST Interesting ports on 192.168.1.1: Not shown: 1695 closed ports PORT STATE SERVICE 23/tcp open telnet 443/tcp open https Nmap finished: 1 IP address 1 host up scanned in 7.403 seconds Looks like HTTP died... HTTPS is...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

No description provided by source. !/bin/bash - echo ' include string.h include stdlib.h include unistd.h include utmp.h include sys/types.h include stdio.h int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0;...

Debian - Symlink In Login Arbitrary File Ownership

!/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy"; strcpyentry.uthost,"badhost"; entry.utaddr=0; fori=1;i /tmp/fillutmp.c cc ...

debian-symlink.txt

!/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy"; strcpyentry.uthost,"badhost"; entry.utaddr=0; fori=1;i /tmp/fillutmp.c cc ...

SysV /bin/login buffer overflow (telnet)

The remote /bin/login seems to crash when it receives too many environment variables. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...