FreeBSD 3.03.13.23.33.4 - AsmonAscpu Local Privilege Escalation

FreeBSD 3.03.13.23.33.4 - AsmonAscpu Local Privilege Escalation source: https://www.securityfocus.com/bid/996/info A vulnerability exists in both the ascpu and asmon ports to FreeBSD. Ascpu and asmon are applets for the popular window manager AfterStep. They retain the look and feel of this windo...

bordermanager-dos.txt

The issue also affects BorderManager 3.0 sp2 running on NetWare 4.11 sp6a. I was able to replicate the memory allocation error but have not had any luck with obtaining the high CPU utilisation. Again, csatpxy.nlm is loaded by default on this system and unloading it stopped the memory allocation...

CVE-1999-0578

CVE-1999-0578 affects Windows NT; multiple connected sources confirm the issue is that the registry auditing policy does not log events for security-critical registry keys (both success and failure). Documented scope: Windows NT OS with registry audit policy lacking event logging for cryptographi...

CVE-1999-0577

A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories...

CVE-1999-0576

CVE-1999-0576 concerns Windows NT: the file audit policy fails to log event success or failure for security-critical files/directories. Affected component is the Windows NT file auditing mechanism; root cause is the policy not emitting logs for accesses to critical files/directories (no explicit ...

CVE-1999-0577

The CVE-1999-0577 issue affects Windows NT with the file audit policy failing to log events for non-critical files/directories. Affected component: Windows NT file audit policy (logging of success/failure). Root cause: audit policy does not log certain accesses, per multiple sources (NVD/Red Hat/...

CVE-1999-0579

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys...

CVE-1999-0576

A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories...

CVE-1999-0579

CVE-1999-0579 affects Windows NT where the registry audit policy does not log an event for successes or failures when non-critical registry keys are accessed. The root cause is a missing log for non-critical keys, resulting in an auditing gap. Documents from Red Hat, CVE databases, and PT-Policy ...

CVE-1999-0575

CVE-1999-0575 concerns Windows NT where the user audit policy fails to log events for a wide range of activities (Logon/Logoff, File/Object Access, User Rights, Group Management, Security Policy Changes, Restart, Shutdown, System, Process Tracking). The Red Hat entry confirms this behavior withou...

CVE-1999-0575

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

CVE-1999-0578

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys...

Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service

Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and extern...

CVE-1999-0578: Undefined Security Weakness

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys...

CVE-1999-0579: Undefined Security Weakness

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys...

Novell BorderManager 3.0/3.5 Audit Trail Proxy - Denial of Service

source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and external interfaces. If a connection is made to this port and the 'enter...

CVE-1999-0575: Undefined Security Weakness

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

CVE-1999-0577: Undefined Security Weakness

A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories...

CVE-1999-0576: Undefined Security Weakness

A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories...

Microsoft SQL Server Database Link Crawling Command Execution

This module can be used to crawl MS SQL Server database links and deploy Metasploit payloads through links configured with sysadmin privileges using a valid SQL Server Login. If you are attempting to obtain multiple reverse shells using this module we recommend setting the "DisablePayloadHandler"...