498 matches found
eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflow
This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the LICMGRADDLICENSE command, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires Metasploit:...
CVE-2004-2544
The CVE-2004-2544 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. The Admin Console exports private keys when exporting firewall certificates, potentially exposing sensitive information. Affected component: Admin Console; vulnerability: exporting private keys. Impact described...
CVE-2004-2545
CVE-2004-2545 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. Described as a remote denial of service of the SMTP proxy triggered by an “extremely busy network.” The embedded monitoring sub-system reportedly restarts after the failure. No remediation or concrete exploitation details ...
CVE-2004-2544
Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information...
CVE-2004-2545
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...
CVE-2004-2543
The CVE-2004-2543 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. It describes a potential remote DoS where an attacker can trigger a proxy failure by sending invalid traffic to the T.120 or RTSP proxy, or sending invalid MIME messages to the mail filter. The note indicates th...
CVE-2004-2543
Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...
CVE-2005-3251
CVE-2005-3251 is a directory traversal flaw in Gallery 2.0 (G2) where the g2_itemId parameter of main.php can be crafted by an attacker to read/include arbitrary files. Multiple OpenVAS/Nessus-derived feeds corroborate a read-access vulnerability affecting Gallery 2.x deployments, with the issue ...
CVE-2004-2399
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service CPU consumption via delayed responses to DNS queries...
CVE-2004-2399
Summary: CVE-2004-2399 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. The vulnerability allows remote attackers to cause a denial of service via delayed responses to DNS queries, resulting in CPU consumption. The connected documentation confirms the affected product/version and the ...
CVE-2004-2543
Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service proxy failure via invalid traffic to the 1 T.120 or 2 RTSP proxy, or 3 invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring...
CVE-2004-2399
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service CPU consumption via delayed responses to DNS queries...
CVE-2004-2544
Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information...
CVE-1999-1282
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges...
CVE-1999-1282
The CVE-1999-1282 entry concerns RealSystem G2 server where the administrator password is stored in cleartext in a world-readable configuration file. The underlying impact is that local users can gain privileges on the affected system due to this configuration weakness. The provided documents do ...
RealServer G2 Malformed Telnet Data Remote Overflow
If a user sends an oversized login / password combination to the administrative server of a RealServer G2, it will overflow the server's buffer. An attacker can use this flaw to execute arbitrary code on the remote system. C Tenable Network Security, Inc. Original exploit code : see...
realg2freebsd.txt
Date: Wed, 10 Feb 1999 20:12:34 -0500 From: Spencer Portee - Yard Productions To: [email protected] Subject: RealServer G2 + FreeBSD 3.0 There is a memory leak in RealServer G2 which causes FreeBSD 3.0-stable to crash/reboot randomly mostly rebooting. Real has been notified and are working on...