3214 matches found
DST2K0040.txt
============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 26/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
IRIX telnetd vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX telnetd vulnerability Number: 20000801-01-P Date: September 6, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this informati...
Loading Rootkit using SystemLoadAndCallImage
Greets, For a while there has been a thread on NTBUGTRAQ about kernel-mode protection from rootkits. This is good - the whole point of our rootkit.com project is to get people thinking about the problem. For example, there is now an ANTI-Rootkit called Integrity Protection Driver from Pedestal...
Дырка в Tumbleweed Worldsecure (MMS)
При установке создается учетная запись пользователя с пустым паролем и без ограничения прав...
Sun AnswerBook2 1.4.21.4.31.4.4 - Administration Interface Access
Sun AnswerBook2 1.4.21.4.31.4.4 - Administration Interface Access source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create...
Проблема в SSH с Kerberos
При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...
Visible Systems Razor 4.1 - Password File (2)
Visible Systems Razor 4.1 - Password File 2 source: https://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or us...
Visible Systems Razor 4.1 - Password File (2)
source: https://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those passwords to access other users'...
allmanage.pl.txt
Allmanage.pl vulnerability 13 may 2000 Websites using 'Allmanage Website Administration Software 2.6 WITH the upload ability', and maybe earlier versions , contain a vulnerability wich gives you full add/del/change access in the user-account directories and you can change the files in the main...
UoW IMAPd Serve 10.23412.264 - COPY Buffer Overflow (Metasploit)
UoW IMAPd Serve 10.23412.264 - COPY Buffer Overflow Metasploit source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes...
UoW IMAPd Server 10.234/12.264 - LSUB Buffer Overflow (Metasploit)
source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine. Executing the list command...
SalesLogix Eviewer Web App Bug: URL request crashes eviewer web application
Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, I am not liable for any damages caused by direct or indirect use of the information or functionality provided by this advisory. I bear NO responsibility for...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
CVE-1999-0198
finger .@host on some systems may print information on some user accounts...
CVE-1999-0197
finger 0@host on some systems may print information on some user accounts...
CVE-1999-0198
The CVE-1999-0198 entry concerns the finger service (finger .@host) which may disclose information about user accounts on affected systems. The core issue is an information-disclosure vulnerability in the remote finger daemon, enabling an attacker to view which accounts exist or have never been u...
CVE-1999-0750
Technical details for CVE-1999-0750 are not publicly provided in the supplied documents. Monitor for updates from official feeds.
CVE-1999-0505
A Windows NT domain user or administrator account has a guessable password...
CVE-1999-0504
CVE-1999-0504 describes a Windows NT local account with a default, null, blank, or missing password. Public references note exploitation paths via Windows SMB/PSEXEC‑style mechanisms and remote command execution tooling, with related Metasploit modules referencing the CVE when using an administra...