9283 matches found
CVE-1999-1105: Undefined Security Weakness
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...
Multiple Vendor Malformed SNMP Message-Handling DoS
It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields. An attacker may use this flaw to prevent you from using SNMP to administer your network or use other flaws to execute arbitrary code with the privileges of the SNMP daemon. C Tenable...
CVE-2001-0949
CVE-2001-0949 affects ValiCert Enterprise Validation Authority (EVA) Administration Server, versions 3.3–4.2.1. The vulnerability is a buffer overflow in the forms.exe CGI program that enables remote attackers to execute arbitrary code by supplying long arguments to a set of parameters (Mode, Cer...
CVE-2001-0950: Insufficient Entropy
ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 uses insufficiently random data to 1 generate session tokens for HSMs using the C rand function, or 2 generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool ...
CVE-2001-0949: Undefined Security Weakness
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters 1 Mode, 2 CertificateFile, 3 useExpiredCRLs, 4 listenLength, 5 maxThread, 6...
[ Hackerslab bug_paper ] Xkas application vulnerability
============================================================================= Hackerslab bugpaper Xkas application vulnerability ============================================================================= File : /usr/etc/appletalk/xkas application SYSTEM : tested irix 6.5 INFO : Xkas is a serve...
Timbuktu DoS vulnerabilty
Timbuktu 6.0.1 and Older DoS Advisory Discovered by: Teknophreak of Malloc E-mail: [email protected] "Timbuktu" is a remote administration suite that is available for MacOS and Windows operating systems. Timbuktu utilizes a range of ports between 1417 - 1420. There exist a Denial of Service...
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service
source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of administrative tasks, including full remote access to the user's...
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of...
Cacheflow CacheOS 3.1/4.0 Web Administration - Arbitrary Cached Page Code Leakage
source: https://www.securityfocus.com/bid/3841/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. When a user connects to the system via the web administration interface on port 8081, and issues an HTTP...
BOOZT! Standard 's administration cgi vulnerable to buffer overflow
BOOZT! is a banner management software for linux servers. It has a remote administration system based on web. I played with version 0.9.8alpha. Here is a reproduction of the bug: http://127.0.0.1:8080/cgi-bin/boozt/admin/index.cgi?section=5&input=1 Fill the "Name Field" with enough A's 770 was be...
CVE-2001-1527
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access...
webmin 0.91 - Directory Traversal
source: https://www.securityfocus.com/bid/3698/info Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms, you can setup user accounts, Apache, DNS, file sharing and so on. Webmin will run on most Unix variants, providing it has been...
CVE-2001-0950
ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 uses insufficiently random data to 1 generate session tokens for HSMs using the C rand function, or 2 generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool ...
PT-2001-2102 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server
Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue allows remote attackers to execute arbitrary code via long arguments to various parameters, including Mode, Certificate File,...
PT-2001-2103 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server
Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue arises from the use of insufficiently random data. This affects two main areas: 1 the generation of session tokens for HSMs,...
CVE-2001-1463
The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...
RhinoSoft Serv-U remote administration client transmits password in plaintext
Overview A vulnerability exists in the remote administration client for RhinoSoft Serv-U. During the authentication process, the client ignores the S/KEY one-time password OTP challenge sent by the server and sends the password entered by the user in plaintext. Description RhinoSoft Serv-U is a...
An Analysis of the RADIUS Authentication Protocol
An Analysis of the RADIUS Authentication Protocol by Joshua Hill, InfoGard Laboratories www.infogard.com Last Modified Mon Nov 12 16:12:53 PST 2001 A current HTML version of this paper can be found at: http://www.untruth.org/josh/security/radius Please send comments to [email protected] 1...