CVE-2009-2367: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the sessionid parameter...

CVE-2009-2322

The CVE-2009-2322 entry concerns the Axesstel MV 410R router. A vulnerability in the CGI script cgi-bin/sysconf.cgi enables cross-site scripting (XSS), allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics indicate a Medium severity (CVSS v2: AV...

CVE-2009-2321: Undefined Security Weakness

cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service configuration reset via a RESTORE=RESTORE query string...

CVE-2009-2322: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2323: Cross-Site Request Forgery (CSRF)

The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery CSRF attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script...

CVE-2009-2258: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...

CVE-2009-2256: Improper Input Validation

The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...

System V Derived /bin/login Extraneous Arguments Buffer Overflow

This exploit connects to a system's modem over dialup and exploits a buffer overflow vulnerability in it's System V derived /bin/login. The vulnerability is triggered by providing a large number of arguments. This module requires Metasploit: https://metasploit.com/download Current source:...

Unfixed XSS vulnerability at usr-bin-mom.com

Security researcher skathgh420, has submitted on 17/06/2009 a cross-site-scripting XSS vulnerability affecting usr-bin-mom.com, which at the time of submission ranked 5777339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34 bytes

linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34 bytes. Shellcode exploit for linx86 platform / linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34byte universal shellcode blue9057 [email protected] / int main char shellcode="\x6a\x31\x58\x99\xcd\x80\x89\xc3\x89\xc1\x6a\x46"...

CVE-2009-2013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bin/apsbrowsesources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the sourceclass parameter in a browseclasses action...

Solaris Update for /usr/bin/ftp 108899-04

Check for the Version of /usr/bin/ftp OpenVAS Vulnerability Test Solaris Update for /usr/bin/ftp 108899-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/ftp 108900-04

Check for the Version of /usr/bin/ftp OpenVAS Vulnerability Test Solaris Update for /usr/bin/ftp 108900-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/tip 124998-01

Check for the Version of /usr/bin/tip OpenVAS Vulnerability Test Solaris Update for /usr/bin/tip 124998-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for usr/bin/dircmp 138897-01

Check for the Version of usr/bin/dircmp OpenVAS Vulnerability Test Solaris Update for usr/bin/dircmp 138897-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Solaris Update for usr/bin/ckitem 112039-01

Check for the Version of usr/bin/ckitem OpenVAS Vulnerability Test Solaris Update for usr/bin/ckitem 112039-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Solaris Update for /usr/bin/ftp 108900-04

Check for the Version of /usr/bin/ftp OpenVAS Vulnerability Test Solaris Update for /usr/bin/ftp 108900-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/rcp 114670-04

Check for the Version of /usr/bin/rcp OpenVAS Vulnerability Test Solaris Update for /usr/bin/rcp 114670-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/rcp 114669-04

Check for the Version of /usr/bin/rcp OpenVAS Vulnerability Test Solaris Update for /usr/bin/rcp 114669-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for /usr/bin/tcsh 110943-04

Check for the Version of /usr/bin/tcsh OpenVAS Vulnerability Test Solaris Update for /usr/bin/tcsh 110943-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...