mozilla -- javascript "lambda" replace exposes memory contents

A Mozilla Foundation Security Advisory reports: A bug in javascript's regular expression string replacement when using an anonymous function as the replacement argument allows a malicious script to capture blocks of memory allocated to the browser. A web site could capture data and transmit it to...

phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)

Exploit for unknown platform in category web applications ================================================================= phpBB include include //Taken from VeNoMouS's love cow code char searchandreplace char text, char find, char replace char found,newtext; int...

News Server (NNTP) Anonymous Read / Write Access

The remote server seems open to remote users. Some people prefer open public NNTP servers to be able to read or post articles anonymously. Unwanted connections could waste your bandwidth or put you into legal trouble if a malicious person were to use your server to post abusive articles. Keep in...

Microsoft Windows XP named pipe fails to restrict anonymous access

Overview The Server service running on Microsoft Windows XP leaks authentication information. Description The Server service srvsvc.dll is a component of the Server Message Block SMB, and its follow-on, Common Internet File System CIFS. These are network protocols that Windows uses to share files...

CVE-2001-1414

The Basic Security Module BSM for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root...

CVE-2005-0051

The Server service srvsvc.dll in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information users who are accessing resources via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."...

WarFTPD 1.82 RC9 DoS

Hello, due to an access violation, specialy crafted CWD-Commands will exit the FTP server when running as a NT service. User needs to be logged on. Vendor's report can be found at http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 Solution: deny anonymous or untrusted logins or use patched...

Cisco 'tech-support' Anonymous User Debugging Information Disclosure

Binary data 2497.prm...

CVE-2004-1891

The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...

Digital Illusions CE Codename Eagle - Remote Denial of Service

source: https://www.securityfocus.com/bid/11887/info A remote denial of service vulnerability reportedly affects Digital Illusions CE Codename Eagle. This issue is due to a failure of the application to properly handle exceptional network data. An attacker may leverage this issue to cause the...

hppsc2510.txt

Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...

Unsecure Ftpd on HP PSC 2510 Printer

Product Name: HP PSC 2510 Summary: Ftp print service is not configurable This printer comes with an ftp daemon which allows anonymous access, and drops the user into a write only directory. By default anyone from anywhere can drop a file into this directory and the printer will print the document...

Quick n EasY 2.4 FTP Server - Remote Denial of Service

Quick n EasY 2.4 FTP Server - Remote Denial of Service !/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is...

Quick &#039;n EasY 2.4 FTP Server - Remote Denial of Service

!/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is viewed or just at the time it will be viewed.This sploi...

ms04-031 pre-auth ??

http://www.microsoft.com/technet/security/bulletin/ms04-031.mspx We have located the vulnerable function and just recently wrote the CANVAS module for it but all our tests showed that the NetDDE vulnerability can not be exploited with a NULL session a.k.a with "Anonymous Logon" credentials. Here...

Weak SSH default ocnfiguration

TCP forwarding is allowed by default, it creates security problem for anonymous SSH access for example with CVS...

SSHD / AnonCVS Nastyness

SSHD / AnonCVS Port Bouncing Nastyness Advisory URL: http://pacsec.jp/advisories.html Summary: -------- Sites with default SSHD configs and anonymous CVS or other "public" access are vulnerable to port bounce attacks. Details: -------- SSHD defaults to AllowTcpForwarding "yes" in...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

Cisco Secure ACS multiple bugs

TCP requests flood DoS, LEAP DoS, anonymous access if Novell Directory Service with anonymous account enabled is used, weak protection against connection hijacking...

GLSA-200408-25 : MoinMoin: Group ACL bypass

The remote host is affected by the vulnerability described in GLSA-200408-25 MoinMoin: Group ACL bypass MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact : Restrictions on anonymous...