Дырка в фаерволах Nokia

Переполнение буфера в утилите удаленного администрирования...

Nokia firewalls

Hi, Well I just unwrapped my shiny new Nokia IP440 integrated Firewall-1/IDS appliance and thought to give it a once over. It appears to be a older fBSD kernel + some firewall checkpoint 4.1 + some IDS ISS + remote admin SSH/http. Now these vulnerabilities all require an authenticated user,...

Дырка в 602Pro Lan Suite

Переполнение буфера при HTTP-GET запросе в библиотеке удаленного администрирования...

602Pro Lan Suite Web Admin Overflow

Strumpf Noir Society Advisories ! Public release ! -- -= 602Pro Lan Suite Web Administration Overflow =- Release date: Wednesday, November 22, 2000 Introduction: Lan Suite is an cost-effective all-in-one application providing connection sharing, email and fax services for networks. It offers remo...

Possible Watchguard Firebox II DoS

Hi, i've recently played with the Watchguard Firebox II firewall and discovered a nasty behaviour. Launching a simple connect flooder against the ftp proxy of the firewall i haven't tested other services the port hangs and so do all other services also the watchguard remote administration daemon,...

Дырка в VolanoChatPro

Пароли администрирования хранятся в доступном для пользователей месте...

Samba 2.0.7 - SWAT Symlink (1)

Samba 2.0.7 - SWAT Symlink 1 // source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes als...

Samba 2.0.7 - SWAT Symlink (2)

source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManager ...

[CORE SDI ADVISORY] Cisco IOS HTTP server DoS

CORE SDI http://www.core-sdi.com Vulnerability Report For Cisco IOS Web Administration DoS Date Published: 2000-10-25 Advisory ID: CORE-20002510 Bugtraq ID: 1838 CVE CAN: None currently assigned. Title: Cisco IOS Web Administration Denial of Service Class: Denial of Service Remotely Exploitable:...

Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval

source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...

Cisco Virtual Central Office 4000 (VCO4K) 5.1.3 - Remote Username Password Retrieval

Cisco Virtual Central Office 4000 VCO4K 5.1.3 - Remote Username Password Retrieval source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and...

CVE-2000-0697

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters...

CVE-2000-0634

The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0598

Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy...

CVE-2000-0257

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

Microsoft Windows 9xME - Share Level Password Bypass (1)

Microsoft Windows 9xME - Share Level Password Bypass 1 source: https://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows...

siemens.ipphone.txt

From: Michal Zalewski Subject: Another thingy. To: [email protected] -- Standard disclaimer applies. I am speaking as a private person, -- and doing it in completely informal way, which shouldn't be interpreted -- in any other way but as my personal opinions and beliefs, which don't have ...

horde.txt

Date: Fri, 8 Sep 2000 17:03:36 +0200 Sender: Bugtraq List From: "Winter, Christian" Subject: horde library bug - unchecked from-address To: [email protected] Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a pape...

Дырка в eTrust Access Control (SeOS)

Для удаленного администрирования используется rlogin-подобный протокол без авторизации с паролем, что позволяет атаки из локальной сети...

Sun AnswerBook2 1.4.21.4.31.4.4 - Administration Interface Access

Sun AnswerBook2 1.4.21.4.31.4.4 - Administration Interface Access source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create...