7784 matches found
Debian DSA-935-1 : libapache2-mod-auth-pgsql - format string vulnerability
iDEFENSE reports that a format string vulnerability in modauthpgsql, a library used to authenticate web users against a PostgreSQL database, could be used to execute arbitrary code with the privileges of the httpd user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian DSA-952-1 : libapache-auth-ldap - format string
'Seregorn' discovered a format string vulnerability in the logging function of libapache-auth-ldap, an LDAP authentication module for the Apache webserver, that can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service
!/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy Yes, I really did implement crc-32 in bash. usage: script victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netcat fifo=/tmp/nc.$$ make the fifos mkfifo $fifo.in mkfifo...
freebsd/x86 portbind 4883 with auth shellcode
freebsd/x86 portbind 4883 with auth shellcode. Shellcode exploit for freebsdx86 platform / THE ZUGCODE - SMALL REMOTE 6ACKD0R FreeBSD i386 bind shell with auth code by MahDelin Big thx SST kaka, nolife, white Listen on the port 4883 the /bin/sh / / void zugcodevoid //socket asm"xorl %eax, %eax";...
freebsd/x86 portbind 4883 with auth shellcode
Exploit for freebsd/x86 platform in category shellcode ============================================= freebsd/x86 portbind 4883 with auth shellcode ============================================= / THE ZUGCODE - SMALL REMOTE 6ACKD0R FreeBSD i386 bind shell with auth code by MahDelin Big thx SST kaka...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to 1 auth/extauth/drivers/mambo.inc.php or 2 auth/extauth/drivers/postnuke.inc.php...
CVE-2006-2346
vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to 1 SMTP AUTH or 2 APOP...
FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS
Exploit for unknown platform in category dos / poc ====================================================== FileCOPA FTP Server = 1.01 USER Remote Pre-Auth DoS ====================================================== FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6...
FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS
No description provided by source. FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6 April 2006 BY Bigeazer http://blacksecurity.org They are selling this software for $39.95... oh well.. maybe they shoud fix it first? It appears that FileCopa does not handle alot...
canbypass.txt
google hack: "Powered by Candidate Resources Inc." I MurderSkillz from g00ns.net have found a auth bypass in Candidate Resources Inc. web software. Looks like there are different places on websies to login. Works for the login pages. Not much you can do but displays the admins info in the edit us...
GLSA-200603-13 : PEAR-Auth: Potential authentication bypass
The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...
PEAR-Auth: Potential authentication bypass
Background PEAR-Auth is a PEAR package that provides methods to create a PHP based authentication system. Description Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact A remote attacker could possibly exploit this vulnerability t...
schooltools.htm.txt
I MurderSkillz from www.g00ns.net have found a auth bypass vulnerability in Schooltools Site Builder - Educator Edition Possibly other versions. The vulnerability takes place in admin.asp. I believe what http://schooltools.us does is they host their customers and they all have...
Crlf injection
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0868
PEAR::Auth back ends in PEAR-Auth are affected by multiple injection vulnerabilities that could allow remote attackers to falsify authentication credentials. Affected are Auth containers before 1.2.4 and 1.3.x before 1.3.0r4. The underlying storage containers are the source of the issue. Reported...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
CVE-2006-0730
Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service application crash or hang via unspecified vectors involving 1 "potential hangs" in the APPEND command and "potential crashes" in 2 dovecot-auth and 3 imap/pop3-login. NOTE: vector 2...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserNam...