4268 matches found
CVE-2004-1891
The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...
Digital Illusions CE Codename Eagle - Remote Denial of Service
source: https://www.securityfocus.com/bid/11887/info A remote denial of service vulnerability reportedly affects Digital Illusions CE Codename Eagle. This issue is due to a failure of the application to properly handle exceptional network data. An attacker may leverage this issue to cause the...
hppsc2510.txt
Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...
Unsecure Ftpd on HP PSC 2510 Printer
Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...
Quick 'n EasY 2.4 FTP Server - Remote Denial of Service
!/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is viewed or just at the time it will be viewed.This sploi...
Quick n EasY 2.4 FTP Server - Remote Denial of Service
Quick n EasY 2.4 FTP Server - Remote Denial of Service !/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is...
ms04-031 pre-auth ??
http://www.microsoft.com/technet/security/bulletin/ms04-031.mspx We have located the vulnerable function and just recently wrote the CANVAS module for it but all our tests showed that the NetDDE vulnerability can not be exploited with a NULL session a.k.a with "Anonymous Logon" credentials. Here...
Weak SSH default ocnfiguration
TCP forwarding is allowed by default, it creates security problem for anonymous SSH access for example with CVS...
SSHD / AnonCVS Nastyness
SSHD / AnonCVS Port Bouncing Nastyness Advisory URL: http://pacsec.jp/advisories.html Summary: -------- Sites with default SSHD configs and anonymous CVS or other "public" access are vulnerable to port bounce attacks. Details: -------- SSHD defaults to AllowTcpForwarding "yes" in...
CVE-2002-1117
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...
CVE-2002-1117: Undefined Security Weakness
Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...
Cisco Secure ACS multiple bugs
TCP requests flood DoS, LEAP DoS, anonymous access if Novell Directory Service with anonymous account enabled is used, weak protection against connection hijacking...
GLSA-200408-25 : MoinMoin: Group ACL bypass
The remote host is affected by the vulnerability described in GLSA-200408-25 MoinMoin: Group ACL bypass MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact : Restrictions on anonymous...
gmailSurf.txt
Anonymous Surfing Via Gmail Login Window - Poor Sanitization User can do anonymous surfing apart form other cool tricks from Gmail login window. The window is small, still checking your mails via google is phun. : 1. Open https://gmail.google.com/?dest=http%3A%2F%2Fblablabla. 2. The login window...
MoinMoin: Group ACL bypass
Background MoinMoin is a Python clone of WikiWiki, based on PikiPiki. Description MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact Restrictions on anonymous users were not properly...
Axis Network Camera 2.x And Video Server 1-3 - virtualinput.cgi Arbitrary Command Execution
Axis Network Camera 2.x And Video Server 1-3 - virtualinput.cgi Arbitrary Command Execution source: https://www.securityfocus.com/bid/11011/info 1. A shell metacharacter command-execution vulnerability allows an anonymous user to download the contents of the '/etc/passwd' file on the device. Othe...
Debian proftpd root Privilege Escalation
Binary data 1817.prm...
Anonymous FTP Enabled
Binary data 1821.prm...