8192 matches found
Winamp 2.73 buffer overflow
I recently found a buffer overflow in Winamp 2.73, it's in the way it parses .AIP files... These files are set to download without a download confirmation, like m3u & pls, so they pose a security threat... actually such exploits make winamp a backdoor A demonstration of how the EIP can be snatche...
ALCATEL Speed Touch PRO port redirect exploit
Taking advantage from the ALCATEL Speed Touch Pro backdoor and configuration problems, it is possible to obtain a "full priv" access to the router and launch several attack against the internal LAN thanks to the NAT/PAT feature often made available. If the router is "telnetable" it means that "ip...
FreeBSD-SA-01:26.interbase
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:26 Security Advisory FreeBSD, Inc. Topic: interbase contains remote backdoor Category: ports Module: interbase Announced: 2001-03-12 Credits: Firebird project Affects:...
CVE-2001-0008
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures...
BorlandInprise Interbase 4.05.06.0 - Backdoor Password
BorlandInprise Interbase 4.05.06.0 - Backdoor Password source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account...
Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password
Overview Description Interbase is an open source database package that is distributed by Borland/Inprise. The server contains a compiled-in backdoor account with a known password.In the following interbase code, references are made about a LOCKSMITH user: ./jrd/dyn.e ./jrd/isc.c ./jrd/jrd.c...
Borland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Password
source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account will eliminate all implemented security allowing full...
CVE-2000-1230
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHPAUTHUSER parameter set to "boogieman"...
CVE-2000-0988
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration...
CVE-2000-0988
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration...
CVE-2000-0988
WinU 1.0–5.1 is affected by a backdoor password that enables remote attackers to access the administrative interface and modify configuration. The NVD entry describes an unauthenticated, remote-access flaw that provides complete administration capability without user interaction, enabling modific...
WinU Backdoor passwords!!!!
WinU 1.0-5.1 Backdoor passwords Intro ===== After downloading WinU 5.1 I noticed the built-in "emergency password" capability, mentioned in the help file. I decided to take a look around. AND WOW! GOT 'EM ALL! Passwords ========= WinU 1.0-2.02: KX98592V63 BARRY SMILER WinU 3.2a: LRTV5 BARRY SMILE...
CVE-2000-0429
CVE-2000-0429 concerns Cart32 3.0 and earlier. The vulnerability is a backdoor password in cart32.exe (password: ‘wemilo’) that allows a remote attacker to execute arbitrary commands in the web server context and potentially access credit card information. An additional path concern is that the a...
wemilo.tcl
!/usr/bin/tcl r00tabega.security.labs www.r00tabega.com code by futant backdoor found by cerberus information security team http://www.cerberus-infosec.com /advcart32.html NOTE: This is terribly easy to exploit but it takes a few minutes Ok, heres how you do this. Go to...
NetStructure 7180 remote backdoor vulnerability
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...
NetStructure 7110 console backdoor
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7110 console backdoor Release Date: May 8th, 2000 Application: Intel NetStructure 7110 previously the Ipivot Commerce Accelerator 1000 Severity: Box can be compromised through configuration...
Cart32 Backdoor Password Arbitrary Command Execution
The Cart32 e-commerce shopping cart is installed. This software contains multiple security flaws. There is a backdoor password of 'wemilo' in cart32.exe. This backdoor allows a remote attacker to run arbitrary commands in the context of the web server, and access credit card information...
Cartfix Secret Backdoor Patch tool for cart32
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Tool Release Name: Cartfix Secret Backdoor Patch tool Release Date: April 27, 2000 Application: Cart32 Shopping Cart Program Platform: Win32 Severity: An attacker can execute commands on the web server and modify admin passwor...
CVE-2000-0429
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands...
Alert: Cart32 secret password backdoor (CISADV000427)
Cerberus Information Security Advisory CISADV000427 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 27th April 2000 Name : Cart32 secret password backdoor Affected Systems : Any Win32 based web server using Cart32 versions 3.0 most uptodate and 2.6 are affected. Issue : Attackers ca...