Command injection

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

CVE-2010-0039

The CVE-2010-0039 issue affects Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station firmware prior to 7.5.2. The root cause is that the Application‑Level Gateway (ALG) modifies PORT commands in incoming FTP traffic, enabling a remote attacker to use the device’s IP ...

CVE-2010-0039: Undefined Security Weakness

The Application-Level Gateway ALG on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by...

Sun Java System Portal Server Multiple Cross Site Scripting Vulnerabilities

This host is running Sun Java System Portal Server and is prone to multiple unspecified Cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavasystemportalserverxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Sun Java System Portal Server Multiple Cross Site Scripting...

VMware WebAccess Multiple Vulnerabilities (Linux)

This host is installed with VMWare Server and is prone to multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareserverwebaccessmultvulnlin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware WebAccess Multiple Vulnerabilities Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbo...

MoinMoin Wiki User Profile Unspecified Vulnerability

This host is running MoinMoin Wiki and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbmoinmoinwikiuserprofunspecifiedvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MoinMoin Wiki User Profile Unspecified Vulnerability Authors: Veerendra GG Copyright: Copyright c 2010...

linkSpheric 'viewListing.php' SQL Injection Vulnerability

The host is running linkSpheric and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gblinksphericviewlistingsqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ linkSpheric 'viewListing.php' SQL Injection Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbon...

XEmacs Multiple Buffer Overflow Vulnerabilities (Windows)

The host is installed with XEmacs and is prone to multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbxemacsmultbofvulnwin.nasl 4970 2017-01-09 15:00:59Z teissa $ XEmacs Multiple Buffer Overflow Vulnerabilities Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbo...

Rootkit techniques the main principle of explanation-vulnerability warning-the black bar safety net

Article author: hackisle rootkit main categories: Application-level-kernel-the hardware level Early rootkits mainly for application-level rootkits application-level rootkits mainly by replacing the login, ps, ls, netstat and other system tools, or modify. rhosts etc system configuration files, et...

Simple Machines Forum Multiple Vulnerabilities

This host has Simple Machines Forum installed which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsimplemachinesforummultvulnapr09.nasl 4869 2016-12-29 11:01:45Z teissa $ Simple Machines Forum Multiple Vulnerabilities. Authors: Nikita MR Copyright: Copyright c 2009...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. Cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. The introduction of any technology is associated with costs and risks in one way or another. This applies to backup as much a...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. Cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. Version control systems Modern version control systems such as CVS, Subversion, or commercial products can and sometimes quit...

Denial of Service against Gauntlet-Firewall / SQL-Gateway

DOS-Attack against Gauntlet Firewall ------------------------------------- We found out a security-issue with the Oracle-Proxy SQL-Gateway of Gauntlet Firewall, Version 6 manufactured by Secure Computing/NAI, serversrunning Solaris 8, newest Patches installed. Abstract: --------- Sending subseque...

fw1-pasv.txt

Multiple firewalls: FTP Application Level Gateway "PASV" Vulnerability Synopsis -------- It is possible to cause certain firewalls to open up any TCP port of your choice against FTP servers that are "protected" by those firewalls. This is done by fooling the FTP server into echoing "227 PASV"...