Sun Solaris catman creates temporary files insecurely

Overview catman, the unix manual display utility, creates insecure temporary files with predictable names in a world-writable directory. Since catman executes with system administration privileges, a symbolic link attack could overwrite arbitrary files. Description There is a vulnerability in...

Webmin Detection

The remote web server is running Webmin, a web-based interface for system administration for Unix. This script was written by Georges Dagousset See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, changed family 4/13/2009 - Added CPE, updated version check, updat...

CVE-1999-1292

Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL...

CVE-1999-1443

Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by 1 using and kill the process using the task manager, 2 booting the system from a separate disk, or 3 interrupting certain processes that execute while...

CVE-1999-1443

CVE-1999-1443 relates to Micah Software Full Armor Network Configurator and Zero Administration. Local attackers with physical access can bypass desktop protection via (1) initiating CTRL+ALT+DEL and terminating the process with Task Manager, (2) booting from an alternate disk, or (3) interruptin...

CVE-1999-1292: Undefined Security Weakness

Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL...

CVE-1999-1443: Undefined Security Weakness

Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by 1 using and kill the process using the task manager, 2 booting the system from a separate disk, or 3 interrupting certain processes that execute while...

Telnet DoS Vulnerability in Marconi ATM Switch Software

INTRO: Marconi ATM switches can be configured with IP addresses for remote administration via telnet and web interfaces. There is a bug that can be used to deny telnet access to the switch, the web interface does not appear vulnerable and console management is unaffected. HISTORY:...

Переполнение буфера в iPlanet Messaging Server (buffer overflow)

Переполнение буфера при разборе имени пользователя в утилите удаленного администрирования...

[SNS Advisory No.39] WinWrapper Professional 2.0 Remote Arbitrary File Disclosure Vulnerability

---------------------------------------------------------------------- SNS Advisory No.39 WinWrapper Professional 2.0 Remote Arbitrary File Disclosure Vulnerability Problem first discovered: Mon, 16 Jul 2001 Published: Mon, 20 Aug 2001...

Обратный путь в WinWrapper (directory traversal)

Обратный путь в системе веб-администрирования порт 4096...

Неавторизованный доступ в MAS 200 (unauthorized access)

Для выполнения некоторых команд администрирования в клиентском подключении не проверяются пользовательские права...

Доступ к администрированию в ZyXEL Prestige (default password)

В стандартной установке разрешен даленный доступ к интерфейсу администрирования...

3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection

source: https://www.securityfocus.com/bid/3034/info A vulnerability exists in certain models of 3Com hubs and potentially other 3Com network products. The affected devices fail to properly restrict the allowed number of login attempts to the inbuilt telnet-based administration interface from remo...

CVE-2001-0432

Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands...

ScreamingMedia SITEWare source code disclosure vulnerability

FS Advisory ID: FS-061201-18-SMSW Release Date: June 11, 2001 Product: ScreamingMedia SITEWare Vendor: ScreamingMedia Inc. http://www.screamingmedia.com Vendor Advisory: http://www.screamingmedia.com/security/sms1001.php Type: Source code disclosure vulnerability Severity: High Author: Mike Shema...

SiteWare 2.53.03.1 Editor Desktop - Directory Traversal

SiteWare 2.53.03.1 Editor Desktop - Directory Traversal source: https://www.securityfocus.com/bid/2868/info Screaming Media is a provider for custom web content. SiteWare Editor Desktop is the web-based administration tool for managing Screaming Media content. SiteWare Editor Desktop is prone to...

CVE-2001-0432: Undefined Security Weakness

Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands...

Уязвимость в NetProwler (default password)

Задается стандартный пароль администрирования и доступа к базам данных по-умолчанию...

CVE-2000-0964

The CVE-2000-0964 entry concerns the HiNet LP5100 IP-phone. The affected component is the web administration service, and the root cause is a buffer overflow triggered by a long GET request. The documented impact is a denial of service and potential execution of arbitrary commands by remote attac...