slmail.ntfs.txt

By-pass NTFS permissions on machines running SLMail 3.2 Introduction This advisory if for those running SLMail version 3.2 or 3.1 with the Remote Administration Service enabled. Due to certain short comings of this service any user with an account on the NT machine running SLMail can by-pass all...

netbus.1.x.DoS.txt

Date: Mon, 22 Feb 1999 22:43:56 +0100 From: Daniel Rosowski To: [email protected] Subject: NetBus client 1.x overflow Hello all you bugtraq"ers" out there, I don't know if this is already known, if so please excuse my post. When I was experimenting with the remote administration tool NetBus 1....

CVE-1999-0677

The WebRamp web administration utility has a default password...

IBM Lotus Domino ?open Forced Directory Listing

It is possible to browse the remote web server directories by appending '?open' to the end of the URL. For example : http://www.example.com/?open Data that can be accessed by unauthorized users may include usernames, server names and IP addresses, dial-up server phone numbers, administration logs...

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (2)

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (1)

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...

CVE-1999-0712

A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...

PT-1999-1292 · Caldera · Caldera Open Administration System

Name of the Vulnerable Software and Affected Versions: Caldera Open Administration System COAS affected versions not specified Description: A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable. Recommendations: At the moment,...

CVE-1999-0221

Denial of service of Ascend routers through port 150 remote administration...

PT-1999-1015 · Ascend · Ascend Routers

Name of the Vulnerable Software and Affected Versions: Ascend routers affected versions not specified Description: The issue allows for a denial of service of Ascend routers through port 150, which is used for remote administration. Recommendations: At the moment, there is no information about a...

PT-1999-1118 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX affected versions not specified Description: A local privilege escalation issue exists in HP-UX, specifically affecting MC/ServiceGuard and MC/LockManager, where local users can exploit the Security Administration Manager SAM to gain...

CVE-1999-0380

SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...

Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration

source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...

Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration

Microsoft IIS 4 Windows NT - Remote Web-Based Administration source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy...

Microsoft Zero Administration Kit (ZAK) 1.0 Office97 - Backdoor Access

Microsoft Zero Administration Kit ZAK 1.0 Office97 - Backdoor Access source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and...

Microsoft Zero Administration Kit (ZAK) 1.0 / Office97 - Backdoor Access

source: https://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and system functions. In an instance where the end-user is not allowed to...

Microsoft IIS 3.04.0 - Upgrade BDIR.HTR

Microsoft IIS 3.04.0 - Upgrade BDIR.HTR source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts...

CVE-1999-1292

Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL...

Metainfo Sendmail 2.02.5 MetaIP 3.1 - Upload Execute Read Scripts

Metainfo Sendmail 2.02.5 MetaIP 3.1 - Upload Execute Read Scripts source: https://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and...

Cisco IOS Web Administration Denial of Service

Advisory ID Internal CORE-22510 Bugtraq ID: 1838 CVE Name: None currently assigned. Title: Cisco IOS Web Administration Denial of Service Class: Denial of Service Remotely Exploitable: Yes Locally Exploitable: Yes Vulnerability Description: The HTTP service facility in the Cisco IOS provides remo...