Novell Netware 5.1 - Remote Administration Buffer Overflow

source: https://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, and if sent a GET request of between 4 and 8 kb, some of the...

Novell Netware 5.1 - Remote Administration Buffer Overflow

Novell Netware 5.1 - Remote Administration Buffer Overflow source: https://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, a...

Novell Netware 5.1 (server 5.00h, Dec 11, 1999)...

Hi again. Another overflow and TCP/IP stack flaw. Affected: virtually any system running on the top of Netware system with http remote administration including web caching solutions, BorderManager firewall and so on... There's an buffer overflow in remote http, usually on port 8008 or so...

vqserver /........../

Version tested: vqserver 1.9.9 for windows The webserver vqserver follows /........../ in requests. http://host/........../autoexec.bat gives the autoexec.bat file. More serious, http://host/........../some/path/vq/server/cfg/server.cfg where /some/path/ could be anything, but normally...

CVE-1999-1000

The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics...

CVE-1999-0896: Undefined Security Weakness

Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password...

infradig_1225_5-3-00.txt

+++=== Written by Nemesystm, leader of the DHC ===== Visit us at dhc1.cjb.net You want 2 == Infradig 1.225 for Windows 95/98 downloaded from cnet.com Installed with the typical installation, no standard settings changed. This problem worked on: Windows 98 + IE5.0 The administration service runs o...

Samba Web Administration Tool (SWAT) Detection

The remote host is running SWAT, the Samba Web Administration Tool. SWAT is a web-based configuration tool for Samba administration that also allows for network-wide MS Windows network password management. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10273;...

LinuxConf Detection

The remote host is running LinuxConf, a web-based administration tool for Linux. It is suggested to not allow anyone to connect to this service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10135; scriptversion"1.23"; scriptcvsdate"Date: 2019/11/22";...

Axis Communications StorPoint CD - Authentication Bypass

source: https://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and private enterprise MIB as well as from the web via a...

CVE-1999-0677

The WebRamp web administration utility has a default password...

CVE-1999-0712

A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...

CVE-1999-0712: Undefined Security Weakness

A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...

CVE-1999-0677: Undefined Security Weakness

The WebRamp web administration utility has a default password...

checkpoint-fw1.vuln.txt

There are two vulnerabilities in FW-1. The first is an authentication issue, the other is a configuration issue. Since I don't have a copy of 4.x FW-1 handy maybe someone can check it for me. 1 The basic authentication used in Checkpoint FW-1 used for inside/outbound and outside/inbound allows...

AltaVista Search Intranet 2.0 b/2.3 - Directory Traversal

source: https://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all documents in the 'http' directory one level up. These...

Fortech Proxy+ 2.30 - Remote Administration

Fortech Proxy+ 2.30 - Remote Administration source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default whic...

Fortech Proxy+ 2.30 - Remote Administration

source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can accomodate for anonymous packet...

CVE-1999-1000

The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics...

sadmind.txt

Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distributed system administration operations such as adding users. The sadmind daemon is start...