1115 matches found
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server CS ACS, generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges b...
CVE-2005-4499
CVE-2005-4499 affects Cisco PIX and VPN 3000 concentrators via the Downloadable RADIUS ACLs feature. When an ACL is created on CS ACS, the system generates a random internal name that doubles as a hidden username and password, enabling a remote attacker to sniff the cleartext username from a RADI...
CVE-2005-4429
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...
CVE-2005-4429
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...
CVE-2005-4429
CVE-2005-4429 describes a SQL injection vulnerability in CS-Cart 1.3.0. The flaw resides in index.php where the parameters sort_by and sort_order can be exploited by remote attackers to execute arbitrary SQL commands. Documents indicate this affects CS-Cart 1.3.0 and allow arbitrary SQL execution...
CS-Cart SQL inj. vuln.
CS-Cart SQL inj. vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/cs-cart-sql-inj-vuln.html Vendor:www.cs-cart.com affected version: Latest. Product description: CS-Cart is a turnkey solution that includes all of the necessary features and...
Valve CS source format string bug
Format string bug in name command...
CVE-2002-0917
CVE-2002-0917 affects CGIScript.net csPassword.cgi, which stores .htpasswd files under the web document root. This allows remote authenticated users to download the password file and crack other users’ passwords. The vulnerability is mapped to a high severity (CVSS v2 base score 7.5, vector AV:N/...
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-1030
CS&T CorporateTime for the Web is vulnerable to user enumeration: it returns different error messages for invalid usernames vs invalid passwords, allowing remote attackers to determine valid usernames on the server. Root cause is inconsistent authentication error handling; impact is partial confi...
bordermanager-dos.txt
The issue also affects BorderManager 3.0 sp2 running on NetWare 4.11 sp6a. I was able to replicate the memory allocation error but have not had any luck with obtaining the high CPU utilisation. Again, csatpxy.nlm is loaded by default on this system and unloading it stopped the memory allocation...
Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service
Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and extern...
Novell BorderManager 3.0/3.5 Audit Trail Proxy - Denial of Service
source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and external interfaces. If a connection is made to this port and the 'enter...
