Inktomi Traffic Server 4.05.x - Cross-Site Scripting

Inktomi Traffic Server 4.05.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/7596/info Inktomi Traffic Server is prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of input passed to the proxy, which will be echoed back in error pages under...

Siemens Mobile Phone Buffer overflow

====================================== --- Product : Siemens Mobile Phone --- Version : All 45 series phones --- OffSite : www.siemens-mobile.com --- Problem : Buffer Overflow. ====================================== General Description В телефонах Siemens серии 45, мною была найдена еще одна...

HP-UX 11 RWrite - Buffer Overflow

HP-UX 11 RWrite - Buffer Overflow source: https://www.securityfocus.com/bid/7489/info HP-UX rwrite utility has been reported prone to a buffer overflow vulnerability. Although unconfirmed code execution with elevated privileges may be possible. The condition presents itself when excessive data is...

PoPToP PPTP 1.1.4-b3 - 'poptop-sane.c' Remote Command Execution

/ Fixed Exploit against PoPToP in Linux poptop-sane.c ./r4nc0rwh0r3 of blightninjas [email protected] blightninjas: bringing pain, suffering, and humiliation to the security world Expect more great release like helloworld-annotated.c and cd explained whitepaper, we are working hard in da...

[SCSA-009] Remote Command Execution Vulnerability in PHP Ping

Security Corporation Security Advisory SCSA-009 PROGRAM: PHP Ping HOMEPAGE: http://www.phpapps.org/ VULNERABLE VERSIONS: v0.1 and prior DESCRIPTION PHP ping "will allow you, provided that your server turns under Windows, to realize a "ping" on the host of your choice." direct quote from PHP Ping...

Kietu ( PHP )

Informations : °°°°°°°°°°°°°° Website : http://kietu.free.fr Version : 2.0, 2.3 Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° hit.php : ------------------------------------------------------------------ if !getcfgvar"registerglobals" $kietu"remoteaddr" =...

PHPMyPub (PHP)

Informations : °°°°°°°°°°°°°° Website : http://phpmypub.free.fr Version : 1.2.0 Problem : Admin access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/index.php : ------------------------------------------------------------------------ ... $auth = $HTTPCOOKIEVARS"adminpub"; if !$auth if $formulaire...

phpPass (PHP)

Informations : °°°°°°°°°°°°°° Version : 2 Website : http://www.agames-net.com Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° accesscontrol.php : ------------------------------------------------ ... sessionregister"uid"; sessionregister"pwd"; ... $sql = "SELECT FROM user WHERE...

vBulletin XSS Injection Vulnerability

.:: vBulletin XSS Injection Vulnerability vBulletin is a powerful and widely used bulletin board system, based on PHP language and MySQL database. I discovered lately a Cross-Site Scripting issue that would allow attackers to inject maleficent codes into the pages and execute it on the clients...

ION Script 1.4 - Remote File Disclosure

ION Script 1.4 - Remote File Disclosure source: https://www.securityfocus.com/bid/6091/info A vulnerability has been discovered in ION Script. By sending a malicious HTTP request to a webserver running the vulnerable ION Script package, it is possible for a remote attacker to disclose arbitrary...

dobermann FORUM (php)

Informations : °°°°°°°°°°°°°° Product : dobermann FORUM version : 0.5 website : http://www.le-dobermann.com Problem : Include file PHP Code/location : °°°°°°°°°°°°°°°°°°° entete.php enteteacceuil.php topic/entete.php : ------------------------------------------ ?php @include...

vpopmail CGIapps vpasswd vulnerabilities

Centaura Technologies Security Research Lab Advisory Product Name: vpopmail-CGIApps Systems: Linux/OpenBSD/FreeBSD/NetBSD Severity: High Risk Remote: Yes Category: Insuficient input checking Vendor URL: http://diario.buscadoc.org/index.php?topic=Programas Advisory Author: Ignacio Vazquez Advisory...

CERN Proxy Server: Cross-Site Scripting Vulnerability

CERN Proxy Server: Cross-Site Scripting Vulnerability ===================================================== Affected: CERN HTTPD 3.0A http://www.w3.org/Daemon/Activity.html Vendor Status: CERN httpd team [email protected] was notified on Aug 10, 2001 but they did not respond. Exploit:...

Sar -o exploitation process info.

Caldera recently released an update for the suid sar binary. At one point in time someone pointed out that sar -f had an overflow Brok Tellier or k2 probably I can't remember. The -f overflow was fixed but the -o option which I have seen in private security advisorys floating around also had an...

Fairly serious vulnerability in vBulletin 2.2.0

This is my first report to bugtraq, I hope this is useful. This has been tested on vBulletin version 2.2.0. The vendor is CC'd on this message. I would imagine this applies to many products, not just the vbulletin, which I would like to say is more secure than most. ------------ The Exploit:...

Vulnerabilities in multiple RADIUS clients and servers

Topic : Vulnerabilities in multiple RADIUS clients and servers Author : 3APA3A Released : December, 18 2001 Affected Software : Lucent/Livingston RADIUS 3= 2.1 12? Cistron 3= 1.6.4 12 Cistron 1.6.5 2 XtRadius 3= 1.1-pre1 12 FreeRADIUS 3= 0.3 12 ICRadius 3= 0.18.1 12 YARD Radius 3= 1.0.19 12 Ascen...

Security Vulnerability with Microsoft Index Server 2.0(Sample fil e reveals file info, physical path etc)

Hi I noticed index server sample file is vulnerable which reveals file info and physical path. Vulnerable Microsoft Index Server 2.0 + IIS 4.0 + Windows NT Server 4.0 + Service Pack 6a Details The Index Server Sample file SQLQHit.asp shipped with Microsoft Index Server 2.0 and Option pack 4.0 , i...

ENTERCEPT SECURITY ALERT: Privilege Escalation Vulnerability in Microsoft IIS

ENTERCEPT SECURITY BULLETIN Date: Aug 15, 2001 Re: PRIVILEGE ESCALATION VULNERABILITY IN MICROSOFT IIS This information is distributed by Entercept Security Technologies to alert you of security vulnerabilities and how to prevent/protect against them. OVERVIEW: A serious vulnerability exists in...

Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (2)

source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image output files. These files are created in /tmp with a guessable naming...

Icecast 1.1.x/1.3.x - Slash File Name Denial of Service

source: https://www.securityfocus.com/bid/2933/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not sufficiently sanitize user-supplied input, or sanely handle unexpected input. Upon receiving a request from a user for a file that end...