Andrew Lewis

The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...

CVE-2000-0598

Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy...

CVE-2000-0434

The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...

CVE-2000-0434: Undefined Security Weakness

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...

Переполнение буфера в ColdFusion

Переполнение буфера при длинном порядка 40000 символов пароле администрирования...

CVE-2000-0113

The CVE-2000-0113 entry concerns the SyGate Remote Management program where the administration service does not properly restrict access, allowing remote attackers to cause a denial of service or view network traffic statistics. Connected documents corroborate a remote controller component (SyGat...

CVE-2000-0113: Undefined Security Weakness

The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...

CVE-2000-0417

The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password...

Banner.rotating

-- Banner rotating 01 -- -- Description: "Banner rotating 01" is a cgi script distributed for free on several site builder sites, including Hot Area. The script is available on http://www.hotarea.net/web/scripts/banner01/ The cgi script offers numerous functions for those wishing to manage rotati...

Allmanage.pl vulnerability

Allmanage.pl vulnerability 13 may 2000 Websites using 'Allmanage Website Administration Software 2.6 WITH the upload ability', and maybe earlier versions , contain a vulnerability wich gives you full add/del/change access in the user-account directories and you can change the files in the main...

McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password

McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password source: https://www.securityfocus.com/bid/1153/info Within cart32.exe, entering any password by way of http://target/scripts/cart32.exe/cart32clientlist, a remote user could obtain vital client information such as usernam...

CVE-2000-0257

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

Novell Netware 5.1 - Remote Administration Buffer Overflow

Novell Netware 5.1 - Remote Administration Buffer Overflow source: https://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, a...

Novell Netware 5.1 - Remote Administration Buffer Overflow

source: https://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, and if sent a GET request of between 4 and 8 kb, some of the...

Novell Netware 5.1 (server 5.00h, Dec 11, 1999)...

Hi again. Another overflow and TCP/IP stack flaw. Affected: virtually any system running on the top of Netware system with http remote administration including web caching solutions, BorderManager firewall and so on... There's an buffer overflow in remote http, usually on port 8008 or so...

vqserver /........../

Version tested: vqserver 1.9.9 for windows The webserver vqserver follows /........../ in requests. http://host/........../autoexec.bat gives the autoexec.bat file. More serious, http://host/........../some/path/vq/server/cfg/server.cfg where /some/path/ could be anything, but normally...

CVE-1999-1000

The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics...

CVE-1999-0896: Undefined Security Weakness

Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password...

infradig_1225_5-3-00.txt

+++=== Written by Nemesystm, leader of the DHC ===== Visit us at dhc1.cjb.net You want 2 == Infradig 1.225 for Windows 95/98 downloaded from cnet.com Installed with the typical installation, no standard settings changed. This problem worked on: Windows 98 + IE5.0 The administration service runs o...

Samba Web Administration Tool (SWAT) Detection

The remote host is running SWAT, the Samba Web Administration Tool. SWAT is a web-based configuration tool for Samba administration that also allows for network-wide MS Windows network password management. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10273;...