CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0168

CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...

CVE-2001-0168: Undefined Security Weakness

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0167: Undefined Security Weakness

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

Tru64 UNIX 4.0g /usr/bin/at Local Root Exploit

Exploit for tru64 platform in category local exploits ============================================== Tru64 UNIX 4.0g /usr/bin/at Local Root Exploit ============================================== / Tru64 UNIX 4.0g JAVA /usr/bin/at local root exploit. ALPHA Author: Cody Tubbs loophole of hhp. Site:...

WinVNC Web Server GET Overflow

This module exploits a buffer overflow in the AT&T WinVNC version use exploit/windows/vnc/winvnc/httpget msf undefinedhttpget show actions ...actions... msf undefinedhttpget set ACTION msf undefinedhttpget show options ...show and set options... msf undefinedhttpget run This module requires...

CVE-1999-0033

Command execution in Sun systems via buffer overflow in the at program...

CVE-1999-0033: Undefined Security Weakness

Command execution in Sun systems via buffer overflow in the at program...

CVE-1999-0987: Improper Authentication

Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name...

ATT_DoS.txt

Subject: DoS attack on AT&T Wireless text-messaging service To: [email protected] Recently, I've had the misfortune of having an automated process at work that reports errors to my PCS phone via email, [email protected] go haywire, and send me a hundred or so messages a day. Even...

at.ease.5.0.txt

Date: Thu, 13 May 1999 09:37:57 -0600 From: Tim Conrad To: [email protected] Subject: At Ease 5.0 Security Hole Hello; At Ease 5.0 will allow a user to access any user's volume on the server. The tested configuration is as follows: MacOS 7.6.1 should work with anything greater than 7 At Ease...

mac-excel98.txt

Subject: MM Giant Excel security hole Date: Thu, 12 Nov 1998 16:09:22 -0500 x-sender: [email protected] From: Steve Klein To: "Mac Mgrs" Mime-Version: 1.0 Sender: [email protected] Status: Question short version: Does anyone know of a way to protect my Macs from Excel's confused pathname...

irixat.txt

Date: Fri, 3 Jul 1998 22:14:14 +0200 From: "J.A. Gutierrez" Subject: more about 'at' I've tried the trick from NetBSD Security Advisory 1998-004 on an IRIX 6.2 host, and it seems it works too. $ at -f /etc/shadow now + 1 minute - shadow is mailed to user: 'at' is: f 23947 91...

Apple At Ease 5.0 - Information Disclosure

source: https://www.securityfocus.com/bid/531/info At Ease 5.0 will allow a user to access any user's volume on the server through a web browser. The tested configuration is as follows: MacOS 7.6.1 should work with anything greater than 7 At Ease 5.0.2 AppleShare IP 5.0.3 Netscape 4.0.7 No reason...

NetBSD 1.3.2 SGI IRIX 6.5.1 - at(1) Read File

NetBSD 1.3.2 SGI IRIX 6.5.1 - at1 Read File source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access...

NetBSD 1.3.2 / SGI IRIX 6.5.1 - 'at(1)' Read File

source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access validation can result in the mailing of portio...

PT-1997-1016 · Sun · At

Name of the Vulnerable Software and Affected Versions: Sun systems affected versions not specified Description: The issue concerns command execution in Sun systems due to a buffer overflow in the at program. Recommendations: At the moment, there is no information about a newer version that contai...

PT-1997-1052 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows for recursive searches by utilizing a long string of @ symbols. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

at(1) Persistence

This module executes a metasploit payload utilizing at1 to execute jobs at a specific time. It should work out of the box with any UNIX-like operating system with atd running. Verified on Kali linux and OSX 13.7.4 Module Options msf use exploit/multi/persistence/at msf undefinedat show actions...