9278 matches found
CVE-1999-0712: Undefined Security Weakness
A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...
checkpoint-fw1.vuln.txt
There are two vulnerabilities in FW-1. The first is an authentication issue, the other is a configuration issue. Since I don't have a copy of 4.x FW-1 handy maybe someone can check it for me. 1 The basic authentication used in Checkpoint FW-1 used for inside/outbound and outside/inbound allows...
AltaVista Search Intranet 2.0 b/2.3 - Directory Traversal
source: https://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all documents in the 'http' directory one level up. These...
Fortech Proxy+ 2.30 - Remote Administration
source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can accomodate for anonymous packet...
Fortech Proxy+ 2.30 - Remote Administration
Fortech Proxy+ 2.30 - Remote Administration source: https://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default whic...
CVE-1999-1000
The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics...
sadmind.txt
Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distributed system administration operations such as adding users. The sadmind daemon is start...
symantec mail-gear 1.0 - Directory Traversal
symantec mail-gear 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/827/info Mail-Gear, a multi-purpose filtering email server, includes a webserver for remote administration and email retrieval. This webserver is vulnerable to the '../' directory traversal attack. By including...
Alt-N MDaemon 2.8.5 - WebConfig Overflow Denial of Service
source: https://www.securityfocus.com/bid/820/info The Mdaemon mail server for Windows includes a small web server for web-based remote administration. This webserver is vulnerable due to an unchecked buffer that handles incoming GET requests. An abnormally large URL sent to the WebConfig service...
Alt-N MDaemon 2.8.5 - WebConfig Overflow Denial of Service
Alt-N MDaemon 2.8.5 - WebConfig Overflow Denial of Service source: https://www.securityfocus.com/bid/820/info The Mdaemon mail server for Windows includes a small web server for web-based remote administration. This webserver is vulnerable due to an unchecked buffer that handles incoming GET...
XtraMail Control Service Username Overflow
The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. XtraMail includes a remote administration utility which listens on port 32000 for logins. Providing a username of over 15,000 characters causes a buffer overflow, which could allow a remote attacker to...
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the correct port must be specified and a...
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow 2 // source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administratio...
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (1)
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow 1 source: https://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration...
Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 - 'Services.exe' Denial of Service (1)
source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the "services" executable, which in turn, disables the ability for the...
Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 - 'Services.exe' Denial of Service (2)
source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the "services" executable, which in turn, disables the ability for the...
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service (2)
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service 2 source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will...
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service (1)
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service 1 source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will...
Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration
source: https://www.securityfocus.com/bid/695/info Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cable modems use a protocol called HSMP, which uses UDP as its transport lay...
