5713 matches found
CVE-2005-0427
The CVE-2005-0427 issue affects Webmin on Gentoo (before 1.170-r3). The ebuild builds a tbz2 of Webmin that unintentionally includes the encrypted root password in miniserv.users, allowing a remote attacker to obtain and potentially crack the password. Gentoo GLSA 200502-12 documents this design ...
CVE-2005-0427
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password...
GLSA-200502-12 : Webmin: Information leak in Gentoo binary package
The remote host is affected by the vulnerability described in GLSA-200502-12 Webmin: Information leak in Gentoo binary package Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that the Webmin ebuild contains a design flaw. It imports the encrypted local root password into the...
CVE-2005-0383
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password...
Linux ncpfs Local Exploit
Exploit for linux platform in category local exploits ========================= Linux ncpfs Local Exploit ========================= !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo...
Encrypted Messenger char sequence DoS
Strings !! cause application to crash...
[Full-Disclosure] Encrypted Messenger DoS Vulnerability
Title: Encrypted Messenger Remote DoS Vulnerability Vendor Homepage: http://www.johnytech.com Discovered by: Adam Baldwin [email protected] www.evilpacket.netadvisoriesEP-000-0001.html Discovery Date: 1.6.2005 Criticality: Low Vulnerable Version:Encrypted Messenger 3.0.71 and possibly...
CVE-2004-2348
Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service hang via an encrypted ZIP file with the "include full path info" option set, as used by certain variants of the Beagle/Bagle worm...
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted"...
linux/x86 chmod 666 shadow ENCRYPT 75 bytes
No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x17abril0x7d2 !!!!! ENCRIPTADA !!!!! 75 bytes chmod 666 /etc/shadow !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue http://www.shellcode.com.ar/Projects/JempiScodesversion.tgz !!!!!! ANTI IDS...
linux/x86 add user t00r ENCRYPT 116 bytes
No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...
linux/x86 add user t00r ENCRYPT 116 bytes
Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 add user t00r ENCRYPT 116 bytes ========================================= / !!!!!! ANTI IDS SHELLCODE !!!!!! email protected 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea...
bsd/x86 execve /bin/sh ENCRYPT* 57 bytes
Exploit for bsd/x86 platform in category shellcode ======================================== bsd/x86 execve /bin/sh ENCRYPT 57 bytes ======================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 57 bytes. -Encriptado execve/bin/sh; Para mas informacion ver...
linux/x86 execve /bin/sh encrypted 58 bytes
linux/x86 execve /bin/sh encrypted 58 bytes. Shellcode exploit for linx86 platform / !!!!!! PRIVATE !!!!!!! // ANTI-IDS SHELLCODE // // !!!!!!!!!!!!!!!!!! // [email protected] 0x1d abril 0x7d2 ./test.c !!! Shellcode execve sh Encriptada !!! AHORA EN 58 BYTES !!!!!!!!!!!!!! Notese que la...
CVE-2002-0850
Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted...
CVE-2002-1318
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string...
[UNIX] WebAPP Directory Traversal and Encrypted DES Disclosure
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
WebAPP directory traversal and ability to retrieve the DES encrypted password hash
WebAPP is advertised as the internet's most feature rich, easy to run PERL based portal system. Its home site is at http://www.web-app.org/ Some features are : -Easy to Install on standard Unix servers! Windows user-supported only! -User Profiles -Message forums -Private messaging between members...
Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability
Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...
