4268 matches found
Microsoft IIS 5.0/6.0 FTP Server - Stack Exhaustion Denial of Service
MS IIS FTPD DoS ZER0DAY There is a DoS vulnerability in the globbing functionality of IIS FTPD. Anonymous users can exploit this if they have read access to a directory!!! Normal users can exploit this too if they can read a directory. Example session where the anonymous user has read access to t...
Microsoft IIS 5.0/6.0 FTP Server (Stack Exhaustion) Denial of Service
Exploit for unknown platform in category dos / poc ===================================================================== Microsoft IIS 5.0/6.0 FTP Server Stack Exhaustion Denial of Service ===================================================================== MS IIS FTPD DoS ZER0DAY There is a DoS...
Microsoft IIS FTPd NLST stack overflow
Microsoft IIS FTPd NLST stack overflow The Microsoft IIS FTPd service may be vulnerable to a stack overflow via the NLST command. On Microsoft IIS 5.x this vulnerability can be used to gain remote SYSTEM level access, whilst on IIS 6.x it has been reported to result in a denial of service. Whilst...
Microsoft Internet Information Server (IIS) FTP server NLST stack buffer overflow
Overview The Microsoft IIS FTP server contains a stack buffer overflow in the handling of directory names, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description IIS is a web server that comes with Microsoft Windows. IIS also includes FTP server...
CVE-2009-2856
Sun Virtual Desktop Infrastructure (VDI) 3.0 is affected when anonymous binding is enabled. The issue arises because the client’s attempt to establish an authenticated and encrypted connection is not properly handled, which might allow remote attackers to read cleartext VDI configuration‑data req...
CVE-2009-2856: Exposure of Sensitive Information to an Unauthorized Actor
Sun Virtual Desktop Infrastructure VDI 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the...
Virtualmin Multiple Vulnerabilities
Virtualmin Multiple Vulnerabilities by Filip Palian filip dot palian at pjwstk dot edu dot pl Software affected: Virtualmin 3.703 Description from the vendor site: "Virtualmin is the world's most powerful and flexible web server control panel. Manage your virtual domains, mailboxes, databases,...
Virtualmin < 3.703 Multiple Local/Remote Vulnerabilities
Exploit for linux platform in category remote exploits ======================================================== Virtualmin alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use...
FreeBSD : drupal -- multiple vulnerabilities (be927298-6f97-11de-b444-001372fd0af2)
The Drupal Security Team reports : Cross-site scripting The Forum module does not correctly handle certain arguments obtained from the URL. By enticing a suitably privileged user to visit a specially crafted URL, a malicious user is able to insert arbitrary HTML and script code into forum pages...
Virtualmin < 3.703 - Multiple Local/Remote Vulnerabilities
Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website" featrue to hide hers real location and conduct attacks on...
Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities
Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website"...
Virtualmin Symlink / XSS / More
Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website" featrue to hide hers real location and conduct attacks on...
Virtualmin < 3.703 Multiple Local/Remote Vulnerabilities
No description provided by source. Virtualmin Multiple Vulnerabilities by Filip Palian filip dot palian at pjwstk dot edu dot pl Software affected: Virtualmin 3.703 Description from the vendor site: "Virtualmin is the world's most powerful and flexible web server control panel. Manage your virtua...
IBM DB2 Multiple Vulnerabilities (Linux)
The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnlin01.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Vulnerabilities Linux Authors: Antu Sanadi Updated KB Name Antu Sanadi on 2009-12-21 Copyright:...
FreeBSD直接管道写操作本地信息泄露漏洞
BUGTRAQ ID: 35279 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD和其他UNIX类系统上最常见的进程间通讯方式之一是匿名管道。这种机制会创建一对文件描述符，可以从一个描述符读取写入到另一个描述符的数据。 FreeBSD的管道实现中包含名为“直接写入”的优化。在这种优化中，FreeBSD内核利用虚拟内存映射允许直接在进程之间拷贝数据，而不是在调用...
FreeBSD Security Advisory (FreeBSD-SA-09:09.pipe.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:09.pipe.asc ADV FreeBSD-SA-09:09.pipe.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:09.pipe.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Microsoft IIS 5.0 WebDAV绕过认证漏洞(MS09-020)
BUGTRAQ ID: 35232 CVECAN ID: CVE-2009-1122 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS的WebDAV扩展没有正确解码特制请求的URL，导致WebDAV在处理该请求时应用不正确的配置。如果应用的配置允许匿名访问，则特制的请求可以绕过身份验证。 请注意IIS在配置的匿名用户帐户的安全上下文中仍会处理该请求，因此此漏洞不能用于绕过NTFS ACL，文件系统ACL对匿名用户帐户强加的限制将仍然执行。 Microsoft IIS 5.0 临时解决方法...
News Server (NNTP) Anonymous Read Access
The remote NNTP server seems to be open to outsiders. Some people like open NNTP servers as they allow one to read Usenet news articles anonymously. Unwanted connections could waste your bandwidth. Note that it is very common for NNTP servers to use IP-based authentication so this may be a false...
IBM DB2 9.1 < Fix Pack 7 Multiple Vulnerabilities
According to its version, the IBM DB2 server running on the remote host is prior to 9.1 Fix Pack 7. It is, therefore, affected by multiple vulnerabilities : - In certain situations an INNER JOIN predicate is applied before the OUTER JOIN predicate, which could result in disclosure of sensitive...
ftpdmin 0.96 Buffer Overflow
".$cmd."\n"; $buff=ftpraw$connid,$cmd; WinExec shellcode of mine, enconded with the alpha2 tool by SkyLined, adds a "surfista" admin user with pass "pass" contains hardcoded address, re-encode command: alpha2 esp shdmp.txt $scode="TYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI"...