4267 matches found
IE-Msddsdll-0day.txt
!/usr/bin/perl Microsoft Internet Explorer "Msdds.dll" Remote Code Execution Exploit 0day Bindshell on port 28876 - Vulnerability discovered and exploited by Anonymous PoC code ripped from Berend-Jan Wever's Internet-Exploiter Vulnerable : EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F Msdds.dll Tested on ...
Microsoft Plug and Play contains a buffer overflow vulnerability
Overview Microsoft Plug and Play contains a flaw in the handling of message buffers that may result in local or remote arbitrary code execution or denial-of-service conditions. Description The following is from the Microsoft Plug and Play description: Plug and Play PnP allows the operating system...
CVE-2002-1738: Undefined Security Weakness
Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email...
CVE-2002-1771: Undefined Security Weakness
Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables...
CVE-2005-1748: Undefined Security Weakness
The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service...
CVE-2004-1891
The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...
CVE-2004-1891
The vulnerability concerns SGI IRIX 6.5.20 ftpd’s ftp_syslog function. Affected component: ftp_syslog in the ftpd daemon; likely logging-related issue when handling anonymous FTP. Underlying cause is not clearly described in the provided documents. Reported impact is unknown; it is suggested that...
CVE-2004-1891: Undefined Security Weakness
The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...
CVE-2004-1811: Undefined Security Weakness
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates...
mozilla -- javascript "lambda" replace exposes memory contents
A Mozilla Foundation Security Advisory reports: A bug in javascript's regular expression string replacement when using an anonymous function as the replacement argument allows a malicious script to capture blocks of memory allocated to the browser. A web site could capture data and transmit it to...
phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)
Exploit for unknown platform in category web applications ================================================================= phpBB include include //Taken from VeNoMouS's love cow code char searchandreplace char text, char find, char replace char found,newtext; int...
News Server (NNTP) Anonymous Read / Write Access
The remote server seems open to remote users. Some people prefer open public NNTP servers to be able to read or post articles anonymously. Unwanted connections could waste your bandwidth or put you into legal trouble if a malicious person were to use your server to post abusive articles. Keep in...
Microsoft Windows XP named pipe fails to restrict anonymous access
Overview The Server service running on Microsoft Windows XP leaks authentication information. Description The Server service srvsvc.dll is a component of the Server Message Block SMB, and its follow-on, Common Internet File System CIFS. These are network protocols that Windows uses to share files...
CVE-2001-1414
The Basic Security Module BSM for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root...
CVE-2005-0051
The Server service srvsvc.dll in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information users who are accessing resources via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."...
CVE-2001-1414: Undefined Security Weakness
The Basic Security Module BSM for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root...
CVE-2005-0051: Undefined Security Weakness
The Server service srvsvc.dll in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information users who are accessing resources via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."...
WarFTPD 1.82 RC9 DoS
Hello, due to an access violation, specialy crafted CWD-Commands will exit the FTP server when running as a NT service. User needs to be logged on. Vendor's report can be found at http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 Solution: deny anonymous or untrusted logins or use patched...
