Ocean12 FAQ Manager Pro - Database Disclosure

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability --------------------------------------------------------- XPL : http://site.com/path//admin/o12faq.mdb De...

Stack overflow

Stack-based buffer overflow in the Process Software MultiNet finger service aka FINGERD for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string...

CVE-2008-5120

CVE-2008-5120 describes a stack-based buffer overflow in the Process Software MultiNet finger service (FINGERD) used by HP OpenVMS 8.3. The overflow occurs via a long request string, enabling remote attackers to execute arbitrary code. The vulnerability is associated with the finger service compo...

mIRC 6.34 - Remote Buffer Overflow

!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...

HP TCP/IP Services for OpenVMS Finger客户端格式串漏洞

BUGTRAQ ID: 30948 CNCAN ID：CNCAN-2008090303 HP OpenVMS是一款HP Integrity或AlphaServer服务器中使用的操作系统。 HP OpenVMS finger客户端存在格式串问题，远程攻击者可以利用漏洞对应用程序权限执行任意指令。 HP OpenVMS finger客户端不正确过滤输入，构建特殊的格式串作为参数数据，可导致内存破坏攻击，造成拒绝服务或者任意代码执行攻击。 HP TCP/IP Services for OpenVMS 5.3 HP TCP/IP Services for OpenVMS 5.6 HP TCP/I...

Design/Logic Flaw

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3946

The CVE-2008-3946 entry affects the finger client in HP TCP/IP Services for OpenVMS 5.x. The vulnerability enables local users to read arbitrary files by requesting a link corresponding to a .plan or a .project file. This is a local, low-complexity issue with complete confidentiality impact on th...

CVE-2008-3940

CVE-2008-3940 describes a format string vulnerability in the finger client of HP TCP/IP Services for OpenVMS 5.x. Local users can gain privileges by supplying crafted content in either the ".plan" or the ".project" file, exploiting format string specifiers. The vulnerability affects the finger cl...

FreeBSD Ports: gnu-finger

The remote host is missing an update to the system as announced in the referenced advisory. VID 610bc692-a2ad-11dc-900c-000bcdc1757a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gnu-finger

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OpenVms 8.3 Finger Service - Stack Buffer Overflow

source: https://www.securityfocus.com/bid/30589/info The finger service 'fingerd' on OpenVMS is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input. Attackers can exploit this issue to execute arbitrary code in the context of the...

OpenVMS fingerd remote stack overflow

sup bugtraq. Since a group of lads are giving a talk on Hacking OpenVMS at defcon I figured I'd release a vulnerability in the OpenVMS finger service part of the MultiNet package to give people a few days to figure out an exploit before the methods are documented for us by the guys giving the tal...

OpenVms 8.3 Finger Service - Stack Buffer Overflow

OpenVms 8.3 Finger Service - Stack Buffer Overflow source: https://www.securityfocus.com/bid/30589/info The finger service 'fingerd' on OpenVMS is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input. Attackers can exploit this issue...

IPS-1 Protection Update - Authentication (v 15), DDOS (v 12), DHCP (v 8), Enterprise Software (v 2), Finger (v 10), FTP (v 23), IRC (v 13), LPD (v 11)

This advisory covers a set of protocol updates for the Authentication, DDOS, DHCP, Enterprise Software, Finger, FTP, IRC, and LPD protocol groups. The Authentication protocol group has been updated to ignore password strength tests for anonymous and guest users. Increased protocol compliance...

FreeBSD : GNU finger vulnerability (610bc692-a2ad-11dc-900c-000bcdc1757a)

GNU security announcement : GNU Finger unfortunately has not been updated in many years, and has known security vulnerabilities. Please do not use it in production environments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2007-4310

The finger daemon in.fingerd in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503...

Command injection

The finger daemon in.fingerd in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503...

CVE-2007-4310

The finger daemon in.fingerd in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503...

CVE-2007-4310

CVE-2007-4310 concerns the Sun Solaris finger daemon (in.fingerd) on Solaris 7–9. The vulnerability allows remote attackers to list accounts that have certain nonstandard GECOS fields by sending a request consisting of a single digit (e.g., finger 9@host). The issue is separate from CVE-2001-1503...

finger NSE Script

Attempts to retrieve a list of usernames using the finger service. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 79/tcp open finger | finger: | Welcome to Linux version 2.6.31.12-0.2-default at linux-pb94.site ! | 01:14am up 18:54, 4 users, load average: 0.14, 0.08, 0.01 | | Login...