ProFTPD Multiple Remote Overflows (palmetto)

The remote ProFTPd server is running a 1.2.0preN version. All the 1.2.0preN versions contain several security flaws that allow an attacker to execute arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10464; scriptversion"1.25";...

Дырка в MiniVend

Классические дырки в демонстрационном web-скрипте...

XFree86: Various nasty libX11 holes

Hi, I'll summarize the impact and recommendations before I paste a mail which goes into technical details of the flaws. SUMMARY ======= Various coding flaws exist in libX11. Whilst this may not sound too serious, it is, for two reasons. They are 1 Various X client programs foolishly have privileg...

HM Software S to Infinity 3.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/1368/info A number of vulnerabilities exist in HM Software S to Infinity, a security access control, desktop lockdown and transparent encryption application. Intended features include restriction of access to folders, files, floppy and CD-ROM drives, etc...

SessionWall-3 Paper + (links to) code

Dear All, The example code which compliments this paper can be found on http://www.phate.net/progs/sw3 Best regards, and enjoy. -cdx -- Design and Implementation Flaws in SessionWall-3 or "Using and Abusing SessionWall-3 with the power of XOR" by Ob1 [email protected] Maelstrom [email protected] Codex...

antisniff latest ("two times fixed") version still exploitable, l0phtl0phe-kid.c

Hi. This email includes personal opinions that might touch the feelings of some persons, but I cannot post this without some anger in my heart, so read on. The story about this bug started some days ago, when someone notified l0pht of a buffer overflow vulnerability in antisniff. Though this...

filemaker.pro5

/off topic: please in the list disable or add filter to your auto-reply/ from:http://www.blueworld.com/blueworld/news/05.01.00-FM5Sec urity.html .../... The precise details of how to exploit these holes is minimized to prevent compromising the integrity of all current Internet-accessible FileMake...

hack-hm-1.1.txt

Title Hotmail Security Alert Hack HM1.1! 5/10/2000 By: Da Hawaiian HaXorS "Give back da aina!" Disclaimer In no event shall Da Hawaiian HaXorS be held liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an...

Microsoft IIS Dangerous Sample Files Detection

Some of the IIS sample files are present. They all contain various security flaws which could allow an attacker to execute arbitrary commands, read arbitrary files or gain valuable information about the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by...

Опубликована очередная сводка уязвимостей ISS

No description provided...

officescan.txt

hi, All of u have certainly seen the possibly general dos attack against OfficeScan just by connecting a client to the port 12345 without sending any TCP FIN packet at the application time-out. After several tests on OfficeScan 3.5, I realized there were numerous other security flaws resulting in...

CVE-2000-0113

The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...

glFTPd 1.17.2 - Code Execution

source: https://www.securityfocus.com/bid/891/info GlFtpd is a popular alternative to the mainstream unix ftp daemons and is currently in wide use on the internet. There are three known serious vulnerabilities in GlFtpd. The first problem is an account which is created by default upon installatio...

SCO Unixware 7.1 - pkg Local Privilege Escalation

SCO Unixware 7.1 - pkg Local Privilege Escalation source: https://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read a...

AN-HTTPd 1.2b - CGI s

AN-HTTPd 1.2b - CGI s source: https://www.securityfocus.com/bid/762/info Certain versions of the AN-HTTPd server contain default CGI scripts that allow code to be executed remotely. This is due to poor sanity checking on user supplied data. http://www.xxx.yy/cgi-bin/input.bat?|dir....\windows...

kki.inactive.connections.txt

Date: Wed, 28 Apr 1999 13:59:28 +0200 From: Lukasz Luzar To: [email protected] Subject: KKIS.28041999.002.b S E C U R I T Y Contacts KKI Security Team Cracow Commercial Internet http://www.security.kki.pl http://www.kki.pl mailto:[email protected] mailto:[email protected] Informations Raport...

PADLOCK.txt

LOWNOISE Advisory: [email protected] by ET. PADLOCK-IT 1.01 =============== DISCLAIMER: Learn, there are dark things behind a nice GUI. Well, maybe this isnt a topic for bugtraq but many people is using this kind of programs to protect all kind of passwords. Dial-up passwords, UNIX accounts, etc...

padlock-it.txt

Date: Fri, 19 Feb 1999 13:51:39 -0500 EST From: ET LoWNOISE To: [email protected] Cc: [email protected] Subject: PADLOCK-IT and TwoFish Hi, 2 months ago, i deliver this advisory to bugtraq... but now i have found that this program is more popular than ever because have been show...

eggdrop137.txt

Date: Wed, 15 Jul 1998 01:03:39 +0200 From: Paul Boehm Subject: eggdrop1.3.17 security Hi, i played around with eggdrop 1.3.17 and looked at it's source searching for security flaws, and found quit a lot of them... most likely there are more of them... Summary: =2E i didn't find any bugs useable...

aimprotocol.txt

http://www.rootshell.com/ Author: [email protected] http://www.foo.org/aim/ A quick note: please, do not kick and scream if this is old news; I don't really watch these things and this is the first I've seen. AOL Instant Messenger doesn't seem to make too much a point of security. Security really isn...