News Update 1.1 - Change Admin Password

/ newsexp.c - description ------------------- begin : Sat Oct 21 2000 copyright : C 2000 by Morpheusbd email : [email protected] advisory : www.brightdarkness.de Exploit code for the News Update 1.1 by Morpheusbd For more information see my advisory which should be in this .tar.gz package...

labs51.txt

Hash: SHA1 Remote DoS Attack in Pragma TelnetServer 2000 Remote Execute Daemon Vulnerability USSR Advisory Code: USSR-2000051 Release Date: August 24, 2000 Systems Affected: Pragma TelnetServer 2000 for Windows NT/2000 THE PROBLEM: The Ussr Labs team has recently discovered a buffer overflow memo...

Blackboard Courseinfo v4.0 User Authentication

Apparently Courseinfo or at least the implementation I was playing with has no user authentication, meaning that anyone can force feed their own form values and Perl with merrily modify the database. So for instance running: all form input is in caps for readability...

Remote DoS Attack in WircSrv Irc Server v5.07s Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in WircSrv Irc Server v5.07s Vulnerability "THE KING IS THE NEXT RELEASE" USSR Advisory Code: USSR-2000049 Release Date: July 10, 2000 Systems Affected: WircSrv Irc Server v5.07s THE PROBLEM The Ussr Labs team has recently discovered...

Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability "THE KING IS COMING" USSR Advisory Code: USSR-2000048 Release Date: July 4, 2000 Systems Affected: LocalWEB HTTP Server 1.2.0 THE PROBLEM The Ussr Labs team has recently discovered a buffer...

Check Point Software Firewall-1 3.0/1.4.0/1.4.1 - Spoofed Source Denial of Service

// source: https://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq is currently being denied as a...

Linux news 5.07.00

Ядро 2.2.17pre10 В очередной pre версии стабильного ядра 2.2.17 Alan Cox добавил следующие патчи: обновлены драйвера, исправлена ошибка с eepro и cs46xx, обновлена документация. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Progress Software создает подразделение по...

fbi-aim-dos.txt

FROM THE OFFICES OF: | | | \ | | | | | | | | | |/ / | | | | | | | | / \ / | / | '| | || ' | / \ | | |/ |/ \ ' \ / / \ | || | | |/ / | | | | || | | | || / | | | | | / | | | | / | / // ,|| /| ||\||||, ||| ||\| / | |/ AOL Instant Messenger DoS Denial of Service exploit. Website:...

Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability USSR Advisory Code: USSR-2000046 Release Date: June 16, 2000 Systems Affected: Dragon Server v2.00 Dragon Server v1.00 THE PROBLEM The Ussr Labs team has recently discovered ...

Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability USSR Advisory Code: USSR-2000044 Release Date: June 13, 2000 Systems Affected: PGP Certificate Server Version 2.5.0 Solaris/Windows PGP Certificate Server Versio...

spad01.txt

Security Point [email protected] www.secpoint.com/advis.html Advisory 001 Title: Java Internet Shop Vulnerability Date: 31-05-00 Copyright c 2000 SECURITY POINT Contents: ========= I Disclaimer II Introduction III Description IV Fix V Contact VI Vulnerable sites VII Job Offers VIII Greetings I -...

unsigned.cab.exploit.txt

Vulnerability details and example exploit for Microsoft Active Setup control's unsigned CAB file execution vulnerability. Introduction Microsoft's Active Setup Control asctrls.ocx shipped with Internet Explorer 4 and above has a vulnerability in it as discovered by Juan Carlos Garcia Cuartango ,...

Microsoft Internet Explorer 4.x/5 / Outlook 2000 0/98 0/Express 4.x - ActiveX '.CAB' File Execution

Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4,Internet Explorer 4.1 for Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Outlook 2000 0/98 0,Outlook Express...

Apple At Ease 5.0 - Information Disclosure

Apple At Ease 5.0 - Information Disclosure source: https://www.securityfocus.com/bid/531/info At Ease 5.0 will allow a user to access any user's volume on the server through a web browser. The tested configuration is as follows: MacOS 7.6.1 should work with anything greater than 7 At Ease 5.0.2...