1697 matches found
Apache 1.3.x < 2.0.48 mod_userdir - Remote Users Disclosure
/ m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default configuration of moduserdir default apache module. Then attemp...
JBoss 3.2.1: Remote Command Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================ Illegalaccess.org Security Alert ================================ Date : 10/04/2003 Application : JBoss, java server for running J2EE enterprise applications Version : 3.2.1 Website : http://www.jboss.org Problems :...
Solaris Sadmind Default Configuration Remote Root Exploit
No description provided by source. !/usr/bin/perl -w Title: rootdown.pl Purpose: Solaris Remote command executiong via sadmind Author: H D Moore hdm at metasploit.com Copyright: Copyright C 2003 METASPLOIT.COM use strict; use POSIX; use IO::Socket; use IO::Select; use Getopt::Std; my $VERSION =...
Solaris Sadmind - Default Configuration Remote Code Execution
!/usr/bin/perl -w Title: rootdown.pl Purpose: Solaris Remote command executiong via sadmind Author: H D Moore hdm at metasploit.com Copyright: Copyright C 2003 METASPLOIT.COM use strict; use POSIX; use IO::Socket; use IO::Select; use Getopt::Std; my $VERSION = "1.0"; my %opts; getopts"h:p:c:r:iv"...
X servers may have insecure default configuration of xhosts
Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...
CVE-2001-1371
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager...
CVE-2002-0511
The CVE concerns the default nscd configuration in Caldera OpenLinux 3.1/3.1.1, where PTR records are cached instead of querying the authoritative DNS for the A record. This may let remote attackers bypass host-name based access controls. No explicit remediation is described in the provided docum...
CVE-2002-0778
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP...
CVE-2002-0095
CVE-2002-0095 affects BSCW (Basic Support for Cooperative Work) in its default configuration (3.x and possibly 4) where user self-registration is enabled. This could allow remote attackers to upload files and potentially join a user community that was intended to be closed. The CVSS metrics indic...
SyGate 5.0 - Insecure UDP Source Port Firewall Bypass Weak Default Configuration
SyGate 5.0 - Insecure UDP Source Port Firewall Bypass Weak Default Configuration source: https://www.securityfocus.com/bid/6684/info It has been reported that the Sygate Pro firewall permits traffic originating from UDP source port 137 or 138 by default. This may allow a remote attacker to bypass...
ISC DHCPD NSUPDATE MiniRes Library Remote Buffer Overflow Vulnerabilities
Description Multiple buffer overflow vulnerabilities have been reported for the ISC DHCPD service. The vulnerability occurs when the DHCP server is configured to dynamically update records. The vulnerability exists in the library used by NSUPDATE to resolve hostnames. An attacker can exploit thes...
MySQL 3.20.32/3.22.x/3.23.x - Null Root Password Weak Default Configuration (2)
/ source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration problem has been reported in the Windows binary release of MySQL. Reportedly,...
remote SYSTEM compromise in WASD OpenVMS http server
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in WASD http server for OpenVMS Version 1.0, 25 Sept 2002. 0. Contents 1. Summary 2. Severity: Critical 3. Vulnerable versions 4. Description 5. Solutions 6. Examples of site weaknesses 7. Conclusion 8. Acknowledgments 9...
OpenVMS WASD multiple bugs
Weak default configuration, protection bypass, CGI execution in server's content...
MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration (1)
MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration 1 / source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration...
Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3)
Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-7 Description: Tomcat multiple sample files display webroot location on default configuration on request. Date: 8/1/2002 Application: Apache Tomcat java server v3.23, 3.24. Platform: Linux/Unix Severity: Remote attackers can obta...
CVE-2002-0255
The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router...
Apache Tomcat 3.2.3/3.2.4 - Example Files Web Root Full Path Disclosure
source: https://www.securityfocus.com/bid/4877/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. When Apache Tomcat is installed with a default configuration, several example files are also installed. When some of these example files are request...