CVE-2002-2149

Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service reboot via a long HTTP request to the administrative interface...

Netscape Enterprise Default Administrative Password (HTTP)

This host is running the Netscape Enterprise Server. The Administrative interface for this web server, which operates on port 8888/TCP, is using the default username and password of SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced...

CVE-2005-3269

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for 1 Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, 2 Red Hat Directory Server and 3 Certificate Server before 7.1 SP1, 4 Sun ONE Directory Server 5.1 SP4 and earlier, and 5 Sun ONE Administration Serv...

Symantec AntiVirus Scan Engine administrative interface contains a buffer overflow vulnerability

Overview Symantec AntiVirus Scan Engine administrative interface contains a remotely exploitatble buffer overflow that may allow an attacker to execute arbitrary code. Description The Symantec AntiVirus Scan Engine provides a programming interface to Symantec content scanning and virus detection...

Symantec Antivirus administrative interface buffer overflow

Buffer overflow during TCP/8004 administrative interface HTTP request parsing...

Symantec Antivirus Scan Engine: Web Service Administrative Interface Buffer Overflow

SUMMARY The remote exploitation of a buffer overflow vulnerability in the web-based Administrative Interface of the Symantec AntiVirus Scan Engine product could potentially allow remote attackers to execute arbitrary code on a targeted system Risk Impact HIGH Remote Access | Yes ---|--- Local...

CVE-2005-3102

The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root...

CVE-2005-3102

CVE-2005-4690 (Movable Type 3.16) : The Red Hat advisory describes that Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (e.g., HTML and images) by selecting an arbitrary directory as a blog’s top-level directory. This is s...

[Full-disclosure] Privilege escalation in Linksys WLAN Monitor v2.0.

Summary: Privilege escalation in Linksys WLAN Monitor v2.0 http://www.linksys.com/ Details: The Linksys WLAN Monitor service WLSVC that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the...

Sambar Server 5.x6.06.1 - Server Referer Cross-Site Scripting

Sambar Server 5.x6.06.1 - Server Referer Cross-Site Scripting source: https://www.securityfocus.com/bid/13722/info Sambar Server administrative interface does not adequately filter some HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create ...

[Full-disclosure] XSS in Sambar Server version 6.2

Sambar - AFFECTED PRODUCTS: ================== Sambar Server 6.2 http://www.sambar.com/ OVERVIEW: ========= Sambar is an all-in-one and fully functional Web, HTTP, HTTPS, Mail, IRC, Syslog, Proxy and FTP server. HISTORY: ======== 17th April 2005 - First discovered 17th April 2005 - Contacted...

Sambar Server Administrative Interface Multiple XSS

The remote host runs the Sambar web server. The remote version of this software is vulnerable to multiple cross-site scripting attacks. With a specially crafted URL, an attacker can use the remote host to perform a cross-site scripting against a third party. %NASLMINLEVEL 70300 C Tenable Network...

Sambar Server 5.x/6.0/6.1 - Server Referer Cross-Site Scripting

source: https://www.securityfocus.com/bid/13722/info Sambar Server administrative interface does not adequately filter some HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing script code which will be executed...

CVE-2005-1590

The Altiris Client Service for Windows ACLIENT.EXE 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" optio...

CVE-2005-1590

The Altiris Client Service for Windows ACLIENT.EXE 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" optio...

CVE-2005-1590

Technical details for CVE-2005-1590 are not publicly available in the provided documents; the available sources describe a related vulnerability but do not reveal affected components, versions, or fixes. Monitor for updates.

Video Cam Server 1.0 - Administrative Interface Authentication Bypass

source: https://www.securityfocus.com/bid/13459/info Video Cam Server is prone to an authentication bypass vulnerability. This vulnerability exists because Video Cam Server fails to control access to the administrative interface. http://www.example.com/admin.html...

NotifyLink administrative interface displays user passwords in clear text

Overview The NotifyLink web interface grants administrative users inappropriate access to private user password information. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The application consists of a PDA-specific...

Debian DSA-436-1 : mailman - several vulnerabilities

Several vulnerabilities have been fixed in the mailman package : - CAN-2003-0038 - potential cross-site scripting via certain CGI parameters not known to be exploitable in this version - CAN-2003-0965 - cross-site scripting in the administrative interface - CAN-2003-0991 - certain malformed email...

CVE-2002-1529

Cross-site scripting XSS vulnerability in msgError.asp for the administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter...