CVE-2006-0404

CVE-2006-0404 affects Note-A-Day Weblog 2.2. The issue is improper access control: sensitive data stored under the web document root can be accessed via a direct request to archive/.phpass-admin, exposing encrypted passwords. This is the stated vulnerability and its impact; no explicit remediatio...

[eVuln] Note-A-Day Weblog Sensitive Information Disclosure

New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...

CVE-2005-4659

IPCop aka IPCop Firewall before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from th...

The Common Market encrypted disc crack not full tricks big secret-vulnerability warning-the black bar safety net

Now on the market there are many encrypted discs, these discs are a special form of burn. Put it into drive, it will appear a software installation screen want you to enter the serial number, if serial number is correct it will appear a file browser window, the error then jumps back to the deskto...

Challenge bundle document scanner a method-vulnerability warning-the black bar safety net

Since don't know who wrote the one bundled file viewer, file combiner's life。。。。。 Last seen mjbinder and vegetables combined controller will be bundled file viewer to find out, has been just depressed. （Don't know the principles of course depressed indeed not check out but with PEID scan can be...

CVE-2002-2172

Informed 1 Designer and 2 Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information...

CVE-2002-2172

CVE-2002-2172 affects Informed Designer and Filler 3.05. The issue is that newly allocated disk blocks are not zeroed out as an encrypted file grows, which may allow an attacker to obtain sensitive information. The connected Red Hat entry reiterates the same description. No explicit exploit detai...

Snort 2.4.2 - Back Orifice Pre-Preprocessor Remote (3)

/ snort 2.4.0 - 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit by Russell Sanford [email protected] - www.code-junkies.net include include include include include include include include include include define buffsize 1056 define COOKIE "!QWTY?" typedef struct char magic8; int len; int id; char...

Lab: crack for all version Access password-vulnerability warning-the black bar safety net

On the Access97 password hack, in a lot of sites and magazines have been introduced. Here I simply repeat it. In the mdb file the 0x42 Byte 1-3 byte, respectively, with 0x86,0xfb,0xec,0x37,0x5d,0x44,0x9c,0xfa,0xc6,0x5e,0x28,0xe6,0x13 XOR can be obtained after thedataLibrary for the password. But ...

POP2 Unencrypted Cleartext Login

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Delta UPS Daemon Detection

The Delta UPS Daemon is running on this server. This UPS provides a daemon that shows sensitive information, including: - OS type and version - Internal network addresses - Internal numbers used for pager - Encrypted password - Latest event log of the machine. SPDX-FileCopyrightText: 2002...

Linksys Multiple Vulnerabilities (OF, DoS, more)

The remote host appears to be a Linksys WRT54G Wireless Router. The firmware version installed on the remote host is prone to several flaws: - Execute arbitrary commands on the affected router with root privilages. CVE-2005-2916 - Download and replace the configuration of affected routers via a...

CVE-2005-2746

Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages...

CVE-2005-2746

CVE-2005-2746 affects Mail.app on Apple Mac OS X 10.3.9 and 10.4.2. The issue arises when using auto-reply rules, causing Mail.app to include decrypted message contents in replies, potentially exposing plaintext from encrypted messages. The vulnerability’s concrete impact is exposure of decrypted...

CVE-2005-2746

Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages...

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow / THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 -...

Snort <= 2.4.2 Back Orifice Parsing Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================================== Snort $Id: THCsnortbo.c,v 1.1 2005/10/24 11:38:59 thccvs Exp $ / / DETAILS The bug is in sppbo.c, BoGetDirection function static int BoGetDirectionPacket p, char pktdata uint3...

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

/ THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 - details added, minor changes v0.1 - first release Greetz to al...

nss_ldap, openldap security update

CentOS Errata and Security Advisory CESA-2005:751-01 Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of...

RHEL 4 : mysql (RHSA-2005:685)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:685 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...