[security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBMA01225 REVISION: 1 SSRT051030 rev.1 - HP OpenView Event Correlation Services OV ECS Remote Unauthorized Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL...

postmaster.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Postmaster 4.2.2 build 3.2.5 multiple vulnerabilities + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://www.woppoware.com.au/ date: 9 May 2005 Severity: High Systems Affected: Microsoft Windows NT 4.0 all...

Arbitrary code execution in SlimFTPd v3.16

Arbitrary code execution in SlimFTPd v3.16 discovered by Raphal Rigo Product: SlimFTPd by WhitSoft Development Affected Version: 3.16 verified, =3.16 probably too Not affected Version: 3.17 OS affected: All Win32 Risk: Critical Remote Exploit: yes URL: http://www.whitsoftdev.com/slimftpd/ Overvie...

CVE-2002-2073

Cross-site scripting XSS vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 ctr parameter in Default.asp and 2 the query string to formslogin.asp...

CVE-2002-2028

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...

CVE-2005-2150

CVE-2005-2150 affects Windows NT 4.0 and Windows 2000 prior to URP1 for Windows 2000 SP4. It stems from insufficient handling of NULL sessions over alternate named pipes, enabling anonymous access to certain interfaces (svcctl and eventlog). Exploitation could allow an unauthenticated remote atta...

CVE-2005-2150

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to 1 list Windows services via svcctl or 2 read eventlogs via eventlog...

[Full-disclosure] NULL sessions vulnerabilities using alternate named pipes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NULL sessions vulnerabilities using alternate named pipes Hervй Schauer Consultants Security Advisory http://www.hsc.fr/ - - Summary - Advisory: NULL sessions vulnerabilities using alternate named pipes CVE identifier: CAN-2005-2150 Release date:...

CVE-2002-1839

Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message...

CVE-2002-1833

The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...

CVE-2002-1833

CVE-2002-1833 affects DocuTech 6110 and DocuTech 6115 where default administrative passwords are set ( Solaris 8.0: “service!”; Windows NT: “administ”). This default credential config allows remote attackers to gain privileges. Root cause is the existence of default admin credentials exposing a p...

CVE-2000-1227

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...

CVE-2002-1839

CVE-2002-1839 affects Trend Micro InterScan VirusWall for Windows NT 3.52. The vulnerability is that the product does not record the sender’s IP address in mail headers when messages are passed from VirusWall to the MTA, enabling remote attackers to obscure the message origin. The connected docum...

CVE-2000-1227

CVE-2000-1227 affects Windows NT 4.0 and Windows 2000 hosts. The vulnerability allows remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests without reading the response. The available documents describe the affected products and the S...

[Full-disclosure] [CIRT.DK - Advisory] Novell eDirectory 8.7.3 DOS Device name Denial of Service

ID: NOVL102201 Domain: primus Solution Class: Novell Fact: Novell eDirectory 8.7.3 for Windows 2000 Fact Novell eDirectory 8.7.3 for Windows NT Symptom: Requesting "DOS Device in Path Name" Denial of Service Symptom: Attack causes error in dhost.exe application Symptom: Attack causes nds service ...

Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14

Summary: Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14 http://www.goodtechsys.com/ Details: Input to the RCPT TO command is not properly checked and/or filtered. Issuing a single character 'A' as an argument to the RCTP TO command will cause the smtpd...

GoodTech SMTP Server 5.14 - Denial of Service

GoodTech SMTP Server 5.14 - Denial of Service ===== Start GoodTechSMTPServerDOS.pl ===== Usage: GoodTechSMTPServerDOS.pl GoodTechSMTPServerDOS.pl 127.0.0.1 GoodTech SMTP Server for Windows NT/2000/XP version 5.14 Download: http://www.goodtechsys.com/ use IO::Socket; use strict; my$socket = ""; if...

GoodTech SMTP Server <= 5.14 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================== GoodTech SMTP Server GoodTechSMTPServerDOS.pl 127.0.0.1 GoodTech SMTP Server for Windows NT/2000/XP version 5.14 Download: http://www.goodtechsys.com/ use IO::Socket; use strict; my$socket =...

netmailsharpro.txt

Netmailshar 4.0 Build 15 Directory traversal & Users enumeration weakneses Release Date: 19 April ,2005 Severity: Medium Vendor: http://www.pppindia.com/ Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Microsoft...

phpStat 1.5 - setup.php Authentication Bypass (Perl)

phpStat 1.5 - setup.php Authentication Bypass Perl !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - PHPStat Setup.PHP Authentication Bypass Vulnerability Exploit By : A l p h a P r o g r a m m e r Sirus-v E-Mail : [email protected] This Xpl Change...