CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

security flaw

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

Potential Buffer Overrun in SWAT

Description The internal routine used by the Samba Web Administration Tool SWAT v3.0.2 and later to decode the base64 data during HTTP basic authentication is subject to a buffer overrun caused by an invalid base64 character. It is recommended that all Samba v3.0.2 or later installations running...

Solaris 8 (sparc) : 108909-13

CDE 1.4: Smart Card Administration GUI patch. Date this patch was last updated by Sun : Feb/26/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2004-0610

CVE-2004-0610 affects the Web administration interface of the Microsoft MN-500 Wireless Router. The issue allows remote attackers to cause a denial of service (connection refusals) by establishing a large number of open HTTP connections. The available documents do not specify the underlying cause...

CVE-2004-0611

Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service no new connections via a large number of open HTTP connections...

CVE-2004-0611

The CVE-2004-0611 issue affects Netgear FVS318 VPN Router. The Web-Based Administration component is vulnerable to a denial of service when an attacker opens a large number of HTTP connections, rendering the device unable to accept new connections (availability impact). The referenced documents d...

Microsoft MN-500 Wireless Router Web-Based Administration DoS

Microsoft MN-500 Wireless Router Web-Based Administration DoS http://www.kurczaba.com/securityadvisories/0406213.htm ------------------------------------------------------------- Vulnerability ID Number: 0406213 Overview: A vulnerability has been found in the Microsoft MN-500 Wireless Router...

NETGEAR FVS318 Web-Based Administration DoS

NETGEAR FVS318 Web-Based Administration DoS http://www.kurczaba.com/securityadvisories/0406211.htm ------------------------------------------------------------- Vulnerability ID Number: 0406211 Overview: A vulnerability has been found in the Netgear FVS318 VPN Router Web-Based Administration...

Webmin: Multiple vulnerabilities

Background Webmin is a web-based administration tool for Unix. It supports a wide range of applications including Apache, DNS, file sharing and others. Description Webmin contains two security vulnerabilities. One allows any user to view the configuration of any module and the other could allow a...

cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion

cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion source: https://www.securityfocus.com/bid/10468/info cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by...

LinkSys WRT54G administration page availble to WAN

Manufacturer: LinkSys a division of Cisco Product: Wireless-G Broadband Router Model: WRT54G Product Page: http://www.linksys.com/products/product.asp?grid=33&scid=35&prid=601 Firmware tested: v2.02.7 In a recent client installation I discovered that even if the remote administration function is...

LinkSys Wireless-G administrative access

Web administration interface is available from external network even if turned off administratively...

[NEWS] SMC Routers Passwordless Remote Administration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SMCwhoops.txt

Tested Model: 7008ABR part number 750.9814 with firmware 1.032 installed Confirmed by another person on: 7004VBR version 1, firmware 1.231 Others may be vulnerable. SMC broadband routers ship with remote administration enabled by default on their port 1900 on the WAN side of the router. If you ju...

CVE-2004-1976

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900...

SurgeLDAP10.txt

SurgeLDAP 1.0g Web service user.cgi File retrieval Release Date: April 13, 2004 Severity: Low Vendor: http://netwinsite.com Details: SurgeLDAP is an advanced easy to manage and install high performance LDAP v3 server. It supports any number of schemas, easy to add/modify existing schemas,...

Backdoor in X-Micro WLAN 11b Broadband Router

Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...

XMicro.backdoor.txt

Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...