FreeBSD : p5-RT-Authen-ExternalAuth -- privilege escalation (cdc4ff0e-d736-11e1-8221-e0cb4e266481)

The RT development team reports : RT::Authen::ExternalAuth 0.10 and below for all versions of RT are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user. CVE-2012-2770 has been assigned to this...

WinRadius Server Denial Of Service Vulnerability

Title: WinRadius Server Denial Of Service Vulnerability Software : WinRadius Software Version : v2009 Vendor: http://www.elite-school.com/saas/WinRadius/ Vulnerability Published : 2012-05-27 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P Bug...

WinRadius密码选项大小验证缓冲区溢出漏洞

BUGTRAQ ID: 53702 WinRadius是基于标准RADIUS协议的适合国内实际情况的拨号认证、记帐、记费商业软件。 WinRadius 2009之前版本在实现上存在拒绝服务漏洞，WinRadius服务器绑定了udp端口1812和1813，但没有验证域选项大小，在发送超过240个字符时，攻击者可利用此漏洞造成服务器崩溃。 0 WinRadius 2009 厂商补丁： WinRadius --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

JBoss AS Remote Exploit v2

No description provided by source. THE FULL DAYTONA PACKAGE -- BY KINGCOPE, YEAR 2011 THREE JBOSS APPLICATION SERVER REMOTE EXPLOITS WITH AUTHEN BYPASS PORTED FROM METASPLOIT AND BEEFED UP WITH TWO SCANNERS: PNSCAN W/ SSL SUPPORT SYNSCAN MODDED FILES: daytonabsh.pl, daytonadeployfile.pl,...

JBoss AS 2.0 - Remote Command Execution

JBoss AS 2.0 - Remote Command Execution THE FULL DAYTONA PACKAGE -- BY KINGCOPE, YEAR 2011 THREE JBOSS APPLICATION SERVER REMOTE EXPLOITS WITH AUTHEN BYPASS PORTED FROM METASPLOIT AND BEEFED UP WITH TWO SCANNERS: PNSCAN W/ SSL SUPPORT SYNSCAN MODDED FILES: daytonabsh.pl, daytonadeployfile.pl,...

JBoss AS 2.0 - Remote Command Execution

THE FULL DAYTONA PACKAGE -- BY KINGCOPE, YEAR 2011 THREE JBOSS APPLICATION SERVER REMOTE EXPLOITS WITH AUTHEN BYPASS PORTED FROM METASPLOIT AND BEEFED UP WITH TWO SCANNERS: PNSCAN W/ SSL SUPPORT SYNSCAN MODDED FILES: daytonabsh.pl, daytonadeployfile.pl, daytonamaindeploy.pl THE REMOTE EXPLOITS,...

smbval.library.bof.txt

Date: Sun, 6 Jun 1999 19:57:44 -0700 From: Patrick Michael Kane To: [email protected] Subject: Buffer overflows in smbval library While working on my Authen::Smb wrapper, which provides SMB authentication to UNIX hosts via perl, I discovered that the library that it is based on, smbvalid.a...