HP-UX mkdir工具本地非授权访问漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的mkdir工具实现上存在漏洞，本地用户可以利用此漏洞在系统中获得非授权访问。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02128）以及相应补丁: HPSBUX02128：SSRT5996 - rev.1 HP-UX mkdir1 Local Unauthorized Access...

HP-UX Software Distributor SWAsk本地格式串漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的Software Distributor实现上存在安全漏洞，允许本地授权用户获得管理员权限提升。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02114）以及相应补丁: HPSBUX02114：SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevation of Privilege...

Solaris 7 (sparc) : 104018-11

The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 2.6 (sparc) : 104018-11

The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

CVE-2006-5711

The CVE-2006-5711 entry concerns the ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router. Affected component: HTTP handling that enables remote attackers to read arbitrary files, demonstrated via a request for a router configuration file related to the /html/defs/ URI. Impact is improper disclos...

ECI Telecom B-Focus ADSL2+无线路由器信息泄漏漏洞

B-Focus ADSL2+是一款内嵌了防火墙的无线路由器。 B-Focus ADSL2+没有正确地配置Web管理界面，允许攻击者通过发送特制请求列出目录，读取路由器和配置文件。 ECI Telecom B-FOCuS ADSL2+ Combo 332+ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.inoviatele.com/ProductsHi/HiBFOCuS332+.asp http://target/html/defs/...

Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD"

·= Security Advisory =· Issue: B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" Discovered Date: 02/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.inoviatele.com/ Details: B-FOCuS Wireless Router is prone to a directory listing...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information. Exploiting thi...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to...

CVE-2006-5557

Stack-based buffer overflow in the 1 swpackage and 2 swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be...

Linux eXtremail 1.5.x Remote Format Strings Exploit

No description provided by source. // / Linux eXtremail 1.5.x Remote Format Strings Exploit / / / / / / By B-r00t - 02/07/2003 / / / / Versions: Linux eXtremail-1.5-8 = VULNERABLE / / Linux eXtremail-1.5-5 = VULNERABLE / / Exploit uses format strings bug in fLog of smtpd to bind a / / r00tshell t...

Kerio MailServer 5.6.3 Remote Buffer Overflow Exploit

No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...

Tagit2b - DelTagUser.php Remote File Inclusion

Tagit2b - DelTagUser.php Remote File Inclusion source: https://www.securityfocus.com/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in...

Tagit2b - 'DelTagUser.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may...

CVE-2006-5151

Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors...

CVE-2006-5093

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

TagIt! Tagboard <= 2.1.b b2 (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================================= TagIt! Tagboard --------------- Vulnerable: http://site/path/index.php?page=shell 0day.today 2018-03-12...

[security bulletin] HPSBUX02102 SSRT051078 rev.4 - HP-UX usermod&#40;1M&#41; Local Unauthorized Access.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00614838 Version: 4 HPSBUX02102 SSRT051078 rev.4 - HP-UX usermod1M Local Unauthorized Access. NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

HP-UX ftpd远程拒绝服务漏洞

BUGTRAQ ID: 16316 HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的ftpd守护程序实现上存在漏洞，远程攻击者无需登录即可对服务器程序造成拒绝服务攻击。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP HP-UX 11.23 HP HP-UX 11.11 HP HP-UX 11.04 HP HP-UX 11.00 HP -- HP已经为此发布了一个安全公告（HPSBUX02092）以及相应补丁: HPSBUX02092：SSRT5971 rev.1 - HP-UX...

VulnCheck KEV: CVE-2006-3590

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493...