154 matches found
Cerberus FTP Server 1.x Buffer Overflow DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2901/info erberus FTP Server is a free, multi-threaded file transfer utility for Microsoft Windows systems. There is a buffer overflow in Cerberus FTP Server. The problem occurs when a user is attempting to authenticate. ...
RealVNC Authentication Bypass
No description provided by source. $Id: realvnc41bypass.rb 13641 2011-08-26 04:40:21Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
CVE-2010-5290
The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different...
Design/Logic Flaw
The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different...
Vino VNC Server 3.7.3 - Persistent Denial of Service
Trustwave SpiderLabs Security Advisory TWSL2013-028: Persistent Denial of Service Vulnerability in Vino VNC Server Published: 09/16/13 Version: 1.0 Vendor: The GNOME Project https://wiki.gnome.org/Vino Product: Vino VNC Server Version affected: Vino VNC Server 3.7.3 and earlier versions 3.8 stabl...
Flaw in Oracle Logon Protocol Leads to Easy Password Cracking
There is a serious vulnerability in the authentication protocol used by some Oracle databases, a flaw that could enable a remote attacker to brute-force a token provided by the server prior to authentication and determine a user’s password. The attacker could then log on as an authenticated user...
Looking to Bolster Security, Dropbox Adds Two-Factor Authentication
Several weeks after announcing that some of its users’ log-ins and passwords had been stolen, file storage company Dropbox announced it has added a two-step authentication process over the weekend to help reinforce the security of its users’ accounts. The added layer of security is currently...
JAKCMS <= v2.01 Code Execution Exploit
Exploit for php platform in category web applications !/usr/bin/python JAKCMS query$sql; if $jakdb-affectedrows 0 $row = $result-fetchassoc; $SESSION'JAKLoggedIn' = true; Additionally, functionality in the backend, allows...
IBM WebSphere Application Server Buffer Overflow (CVE-2005-1872)
The IBM WebSphere Application Server is a Java 2 Enterprise Edition J2EE and Web Services-based application server. The software is made available for various vendor operating systems. There exists a buffer overflow vulnerability in IBM's WebSphere Application Server. The vulnerability is caused ...
CA Multiple Products Console Server Login Handling Buffer Overflow (CVE-2007-2522)
CA Computer Associates provides a group of products intended for enhancing the security of enterprise as well as individual clients. Main series of these products were formerly known as CA eTrust products. The following is a brief list of major products in this group: CA Anti-Virus for the...
Microsoft Windows LSASS Denial of Service Vulnerability (975467)
This host is missing a critical security update according to Microsoft Bulletin MS09-059. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows LSASS Denial of Service Vulnerability (975467)
This host is missing a critical security update according to Microsoft Bulletin MS09-059. OpenVAS Vulnerability Test $Id: secpodms09-059.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows LSASS Denial of Service Vulnerability 975467 Authors: Sharath S Updated By: Madhuri D on 2010-11-24 ...
ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service
ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credential...
Low: Red Hat Security Advisory: dovecot security and bug fix update
An updated dovecot package that corrects two security flaws and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily writte...
APC AP7932 unauthorized access
Logical error in authentication process...
ragnarok-bypass.txt
VaLiuS has reported a vulnerability in Ragnarok Online Control Panel, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error in the authentication process when checking page access. This can be exploited to bypass the...
PPPoE authentication and use-vulnerability and early warning-the black bar safety net
This article is based on the Black anti-2 0 0 5, No. 8, issue of the PPPoE authentication risks with the use of the original author: the knife）rewritten, or republished, column reader Mo laugh to. One, Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed...
Apple Mac OS X多个安全漏洞
Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...
mod_pubcookie -- Empty Authentication Security Advisory
Nathan Dors, Pubcookie Project reports: An Abuse of Functionality vulnerability in the Pubcookie authentication process was found. This vulnerability allows an attacker to appear as if he or she were authenticated using an empty userid when such a userid isn't expected. Unauthorized access to web...