4765 matches found
Microsoft Windows SMB Registry : Key Permission Weakness Admin Privilege Escalation
The following keys contain the name of the program that shall be started when the computer starts. The users who have the right to modify them can easily make the admin run a Trojan program that will give them admin privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Windows SMB Registry : Schedule Key Permission Weakness Local Privilege Escalation
The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
PcAnywhere weak password encryption
PcAnywhere weak password encryption ---- Discussion ---- PcAnywhere 9.0.0 set to its default security value uses a trivial encryption method so user names and password are not sent directly in clear. Since most users have the encryption methods set to either "none" or "PcAnyWhere", their password...
CVE-2000-0084
CuteFTP uses weak encryption to store password information in its tree.dat file...
CVE-1999-0829
HP Secure Web Console uses weak encryption...
Avirt Gateway Suite 3.3/3.3 a/3.5 - Directory Creation
source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to create a directory in the server's local filesystem...
Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation
Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to...
IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password
IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password source: https://www.securityfocus.com/bid/1763/info IBM WebSphere ships with a tool called 'ikeyman' that encrypts server certificates/key pairs when the IBM HTTP Server and SSL connections are enabled. Ikeyman stores the password in a stash...
FTP client/server and listen() implementation
Here is exploit. It works as described in NAI 1996 bulletin http://www.nai.com/nailabs/aspset/advisory/ftp-paper.asp but.... there are two points i'm disagree with NAI. 1. ftp console client under FreeBSD 2.2.x IS vulnerable 2. Inspite I don't treat FTP as secured protocol IMHO it's OS/software...
MacOS_encryption.txt
Subject: MacOS system encryption algorithm To: [email protected] The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and depends on Users & Group...
DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow
DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode =...
sun-encryption-weak.txt
Date: Thu, 14 Jan 1999 23:15:55 -0500 From: spoon To: [email protected] Subject: sun "encryption" lameness I was checking out my new fangled desktop in solaris 7. or 2.7 what ever they are calling it, and i Stumbled across a buttion that said "Encrypt file". I was like shit... I took a swig fr...
embedded-controllers.txt
Date: Fri, 11 Dec 1998 10:45:46 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Security Advisory: ICMP Redirects Against Embedded Controllers -----BEGIN PGP SIGNED MESSAGE----- ISS Security Advisory December 10, 1998 ICMP Redirects Against Embedded Controllers WARNIN...
SAFER+attack.txt
Date: Wed, 30 Dec 1998 01:41:59 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Academic Attacks on SAFER+ Forwarded From: "Jay D. Dyson" Originally From: John Kelsey I believe I have found two attacks on the SAFER+ version with 256-bit keys. While these attacks aren't practical, they...
bmc.patrol.agent.txt
Date: Fri, 9 Apr 1999 12:46:33 +0200 From: fcosta To: [email protected] Subject: Patrol security bugs / / / / / / Security Department / / / Tel : +33 01 41 91 39 00 / / // / Fax : +33 01 41 91 39 99 / / / Patrol Security bugs report PROBLEM: The PATROL management software from BMC SOFTWARE has...
Microsoft Windows 95/98 Internet Explorer 5/Telnet - Local Heap Overflow
// source: https://www.securityfocus.com/bid/586/info Windows 95 and 98 systems running IE4 or specific versions of IE5 5.00.2314.1003 and 5.00.2314.1003IC are susceptible to a remote vulnerability that allows the execution of arbitrary code on a target that views a malicious web page. This...
