7098 matches found
CVE-2006-2346
vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to 1 SMTP AUTH or 2 APOP...
FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS
Exploit for unknown platform in category dos / poc ====================================================== FileCOPA FTP Server = 1.01 USER Remote Pre-Auth DoS ====================================================== FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6...
FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS
No description provided by source. FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6 April 2006 BY Bigeazer http://blacksecurity.org They are selling this software for $39.95... oh well.. maybe they shoud fix it first? It appears that FileCopa does not handle alot...
canbypass.txt
google hack: "Powered by Candidate Resources Inc." I MurderSkillz from g00ns.net have found a auth bypass in Candidate Resources Inc. web software. Looks like there are different places on websies to login. Works for the login pages. Not much you can do but displays the admins info in the edit us...
GLSA-200603-13 : PEAR-Auth: Potential authentication bypass
The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...
PEAR-Auth: Potential authentication bypass
Background PEAR-Auth is a PEAR package that provides methods to create a PHP based authentication system. Description Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact A remote attacker could possibly exploit this vulnerability t...
schooltools.htm.txt
I MurderSkillz from www.g00ns.net have found a auth bypass vulnerability in Schooltools Site Builder - Educator Edition Possibly other versions. The vulnerability takes place in admin.asp. I believe what http://schooltools.us does is they host their customers and they all have...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
Crlf injection
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0868
PEAR::Auth back ends in PEAR-Auth are affected by multiple injection vulnerabilities that could allow remote attackers to falsify authentication credentials. Affected are Auth containers before 1.2.4 and 1.3.x before 1.3.0r4. The underlying storage containers are the source of the issue. Reported...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0730
Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service application crash or hang via unspecified vectors involving 1 "potential hangs" in the APPEND command and "potential crashes" in 2 dovecot-auth and 3 imap/pop3-login. NOTE: vector 2...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserNam...
[SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 952-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23rd, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 952-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23rd, 2006 http://www.debian.org/security/faq -...
Ubuntu 4.10 / 5.04 / 5.10 : libapache2-mod-auth-pgsql vulnerability (USN-239-1)
Several format string vulnerabilities were discovered in the error logging handling. By sending specially crafted user names, an unauthenticated remote attacker could exploit this to crash the Apache server or possibly even execute arbitrary code with the privileges of Apache user 'www-data'. Not...
[SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 935-1 [email protected] http://www.debian.org/security/ Michael Stone January 10, 2006 http://www.debian.org/security/faq -...
