[!H] Tcpdump 3.5.2 remote root vulnerability

!Hispahack Research Team ------------------------ Program: Tcpdump 3.5 3.4, 3.6. and the CVS version are not vulnerable Platform: nix, Windoze Risk: Remote root access Author: Zhodiac [email protected] Date: 4/1/2001 - Problem: ----------- Tcpdump is a network packet analizer, capabel to decod...

ProFTPd 1.2.0 pre10 - Remote Denial of Service

ProFTPd 1.2.0 pre10 - Remote Denial of Service / ProFTPd DoS version 1.1 Remote DoS in proFTPd Code by: JeT-Li -The Wushu Master- [email protected] Recently I posted a remote DoS for ProFTPd based in the multiple use of the SIZE command in order to crash the system. Now and thanks to the...

CVE-2000-1167

ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat denyincoming" command, which allows remote attackers to connect to the target system...

CVE-2000-1126

Vulnerability in autoparms and setparms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service...

tcpdump 3.43.5 - AFS ACL Packet Buffer Overflow

tcpdump 3.43.5 - AFS ACL Packet Buffer Overflow / source: https://www.securityfocus.com/bid/1870/info tcpdump is a popular network monitoring tool used for watching network traffic written by the Lawrence Berkeley Laboratory. It must at least begin execution as root since it opens and reads from...

CVE-2000-1126

Vulnerability in autoparms and setparms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service...

Watchguard SOHO 2.2 - Denial of Service

source: https://www.securityfocus.com/bid/2082/info The SOHO 2.2 is a popular SOHO firewall by Watchguard Technologies Inc. A vulnerability exists in Watchguard SOHO 2.2 firewalls with firmware versions 2.2.1 and below that could allow a remote attacker to execute a Denial of Service attack on th...

PHP 3.0.16/4.0.2 Remote Format Overflow Exploit

Exploit for linux platform in category remote exploits =============================================== PHP 3.0.16/4.0.2 Remote Format Overflow Exploit =============================================== / PHP 3.0.16/4.0.2 remote format overflow exploit. Copyright c 2000 Field Marshal Count August Ant...

CVE-2000-0988

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration...

wu-ftpd 2.6.0 Remote Root Exploit

Exploit for multiple platform in category remote exploits ================================= wu-ftpd 2.6.0 Remote Root Exploit ================================= / c 2000 venglin / b0f http://b0f.freebsd.lublin.pl WUFTPD 2.6.0 REMOTE ROOT EXPLOIT 22/06/2000, updated: 05/08/2000 Idea and preliminary...

CVE-2000-0862

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information...

[SECURITY] New version of Debian bind packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 12, 2000 - ---------------------------------------------------------------------------- Package: bind Vulnerability:...

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (3)

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 3 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...

Kootenay Web Inc whois 1.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a linux server. Due to a failure to...

CVE-2000-0751

mopd Maintenance Operations Protocol loader daemon does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands...

CVE-2000-0872

CVE-2000-0872 affects PhotoAlbum 0.9.9. The vulnerability is a path traversal in explorer.php that allows remote attackers to read arbitrary files via a .. (dot dot) sequence. This is a direct file-disclosure issue, enabling access to non-public data on the server where PhotoAlbum is hosted. The ...

CVE-2000-0514

GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges...

CVE-2000-0225

The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled...

cURL 6.1 7.4 - Remote Buffer Overflow (1)

cURL 6.1 7.4 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/1804/info Curl is an open-source utility for sending or receiving files using URL syntax. A vulnerability exists in the version of curl included with Debian GNU/Linux 2.2 and FreeBSD prior to 4.2 release. Note that...

WU-FTPD 2.4.22.5 .02.6.0 - Remote Format String Stack Overwrite (2)

WU-FTPD 2.4.22.5 .02.6.0 - Remote Format String Stack Overwrite 2 // source: https://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a...