CVE-2001-1132

Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication...

IRIX rpc.passwd problems

No description provided...

Vulnerabilities in Various Implementations of the RADIUS Protocol

CERT Advisory CA-2002-06 Vulnerabilities in Various Implementations of the RADIUS Protocol Original release date: March 4, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running any of the following RADIUS...

BadBlue XSS vulnerabilities / Filesharing Server Worm

Strumpf Noir Society Advisories ! Public release ! -- -= BadBlue XSS vulnerabilities / Filesharing Server Worm =- Release date: Tuesday, February 26, 2002 Introduction: BadBlue is the technology behind Working Resources Inc.'s product line with the same name and which, amongst other things, also...

[resend] Strumpf Noir Society on BadBlue

Strumpf Noir Society Summaries ! Public release ! -- -= Strumpf Noir Society on BadBlue =- Sorry, couldn't resist.. Ok, so we might not be able to actually drive a Mach truck, but this seems to do the trick, give or take a few millions : Release date: Thursday, January 17, 2002 Introduction BadBl...

SurgeFTP admin account bruteforcable

SurgeFTP admin account bruteforcable AFFECTED SYSTEMS SurgeFTP = 2.0f on a win32 platform, should give the same results on nix DESCRIPTION SurgeFTP uses the same extremely weak hashing algorithm as the NWauth module to store the admin password, but adding a fixed 'salting' value which is "qr"...

Cerberus FTP Server 1.x - Buffer Overflow (Denial of Service) (PoC)

Cerberus FTP Server 1.x - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/2901/info erberus FTP Server is a free, multi-threaded file transfer utility for Microsoft Windows systems. There is a buffer overflow in Cerberus FTP Server. The problem occurs when a user i...

RedHat 6.1 IRIX 6.5.18 - lpd Command Execution

RedHat 6.1 IRIX 6.5.18 - lpd Command Execution source: https://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an...

slmail.ntfs.txt

By-pass NTFS permissions on machines running SLMail 3.2 Introduction This advisory if for those running SLMail version 3.2 or 3.1 with the Remote Administration Service enabled. Due to certain short comings of this service any user with an account on the NT machine running SLMail can by-pass all...

Compaq Client Management Agents 3.70/4.0 / Insight Management Agents 4.21 A/4.22 A/4.30 A / Intelligent Cluster Administrator 1.0 / Management Agents for Workstations 4.20 A / Server Management Agents 4.23 / Survey Utility 2.0 - Web File Access

source: https://www.securityfocus.com/bid/282/info A vulnerability in the Compaq Management Agents and the Compaq Survey Utility when running as an agent allows remote malicious users to steal local files. All Compaq Server and Client Management Agents version 4.0 or later are vulnerable. All...

Microsoft IIS 3.0/4.0 - Upgrade BDIR.HTR

source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts, and version 3.0 of IIS came with an...