CVE-2001-0953

Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root...

easynews 1.5 let's remote users modify database

Hey, that's my first submission so don't expect anything spectacular. There are a few bugs in Easynews 1.5: Short Description: Easynews 1.5 - database and templates remotly modifieable, cross site scripting, local users gain admin pass, and stuff : Found by: markus [email protected] Vendor...

CVE-2001-0771

CVE-2001-0771 affects Spytech SpyAnywhere 1.50. The NVD entry states remote attackers can gain administrator access by exploiting a single character in the loginpass field. Metrics indicate a network-based, low-attack-complexity, no-auth scenario with partial confidentiality, integrity, and avail...

3 phpnuke bugs (2 possibly lead to admin privs)

phpnuke www.phpnuke.org is an opensource webpage portal powers many websites on the net. Version 5.x of phpnuke does not properly check some variables, and is vulnerable to an attack that gives an intruder admin privileges. This is only possible if the intruder knows the database name that phpnuk...

SpyAnywhere Authentication Bypassing Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= SpyAnywhere Authentication Bypassing Vulnerabilities =- Release date: Tuesday, May 22, 2001 Introduction: Spytech's SpyAnywhere application is a remote PC monitoring and administration package for the MS Windows OS. SpyAnywhere can be...

Дырка в Spy Anywhere (unprotected admin access)

Используя парль из одного символа можно подключиться с привилегиями администратора...

NewsDaemon does not adequately filter user input to $user_username

Overview NewsDaemon prior to version 0.21b contains a vulnerability allowing remote attackers to gain administrative access to the web site. Description NewsDaemon is a PHP-based tool used to allow readers to submit and comments on news items and stories over the web. It also allows for...

INDEXU Authentication By-Pass

UNDERSEC SECURITY ADVISORY 4th March 20001 ======================================================================= PROGRAM: INDEXU VERSIONS: All versions prior to 2.0Beta 2.0Beta included OS: All REMOTE: YES LOCAL: YES CLASS: Authentication bypass POSTED BY: Sp4rK [email protected] BACKGROUND...

Дырка в Oracle WebDB

часть URL интерпретируется как SQL-запрос. Кроме того, по-умолчанию устанавливается административный доступ без пароля...

Дырка в phpWebLog

Из-за некорректной инициализации переменных пользователь может получить доступ к администрированию...

WinVNC 3.3.x

So, you use WinVNC and Windows NT4 Workstation/Server...? During the InstallShield setup utility, it creates the registry key: HKEYLOCALMACHINESoftwareORLWinVNC3 which is used to store all of WinVNC's default settings. By default, Administrator and SYSTEM have full control, and Everybody has...

Vuln. in all sites using PHP-Nuke, versions less than 3

Greetings, PHP-Nuke is a Web Portal System, storytelling software also an automated web site to distribute news and articles with users system. Exploit: ------- The problem is when somebody does a http://example.com/admin.php3?admin=whatever, can have full access as an admin, that means posting...

Microsoft Windows SMB Registry : Registry HKLM_LOCAL_MACHINE Permissions

The registry key HKEYLOCALMACHINE is writeable by users who are not in the admin group. This allows these users to create a lot of keys on that machine, thus they can probably to get admin easily. Such a configuration probably means that the system has been compromised. C Tenable Network Security...

NetStructure 7110 console backdoor

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7110 console backdoor Release Date: May 8th, 2000 Application: Intel NetStructure 7110 previously the Ipivot Commerce Accelerator 1000 Severity: Box can be compromised through configuration...

CVE-1999-0562

Technical details on CVE-1999-0562 are not publicly provided in the connected documents. The sources reiterate that the Windows NT registry can be accessed remotely by non-administrators. Monitor for updates for concrete impact, affected versions, and remediation.

winroute.3.0x.txt

Date: Fri, 9 Apr 1999 00:37:05 -0400 From: Michael R. Rudel To: [email protected] Subject: Bug in Winroute 3.04g There is a bug in the remote proxy server admin part of Winroute 3.04g. I have tested it on an earlier release 3.04a, and that is also vulnerable. When you first access the admin...

lyris.txt

Date: Sun, 20 Sep 1998 01:40:16 -0400 From: Jimmy Lee Alderson Subject: Vulnerability in Lyris Listserver The following is associated with a post to NTbugtraq. The original post vaguely describes a security problem inherent in a popular server. I recently found this problem on my own, and was goi...

[SECURITY] New versions of mailman fixes cookie attack

We have become aware that the version mailman as supplied in Debian GNU/Linux 2.1 has a problem with verifying list administrators. The problem is that the cookie value generation used was predictable, so using forged authentication cookies it was possible to access the list administration webpag...

Sambar Server 4.1 Beta - Admin Access

Sambar Server 4.1 Beta - Admin Access source: https://www.securityfocus.com/bid/2255/info 'dumpenv.pl' is a utility that will display environment information on which the server resides, this information could include the server software version being used, directory settings and path information...

Sambar Server 4.1 Beta - Admin Access

source: https://www.securityfocus.com/bid/2255/info 'dumpenv.pl' is a utility that will display environment information on which the server resides, this information could include the server software version being used, directory settings and path information. The default authentication credentia...