3181 matches found
Debian DSA-392-1 : webfs - buffer overflows, file and directory exposure
Jens Steube reported two vulnerabilities in webfs, a lightweight HTTP server for static content. CAN-2003-0832 - When virtual hosting is enabled, a remote client could specify '..' as the hostname in a request, allowing retrieval of directory listings or files above the document root. CAN-2003-08...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1694.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1693.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1698.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1700.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1692.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1696.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1699.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1695.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1697.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1701.prm...
thttpd/mini_httpd Virtual Hosting File Disclosure
Binary data 2124.prm...
thttpd/mini_httpd < 2.24 Virtual Hosting File Disclosure
Binary data 2125.prm...
SuSE-SA:2003:044: thttpd
The remote host is missing the patch for the advisory SuSE-SA:2003:044 thttpd. Two vulnerabilities were found in the 'tiny' web-server thttpd. The first bug is a buffer overflow that can be exploited remotely to overwrite the EBP register of the stack. Due to memory-alignment of the stack done by...
Non-logged Brute Force Attack Vulnerability for Fantastico-Created Databases on cPanel Based Hosts
Advisory: cPanel/Fantastico/mysql local vulnerability Date: 5/19/04 By: Michael Curtis email at curto dot us System: Redhat Enterprise 3 ES / cPanel 9.3.0-R5 most likely all redhat versions with all cpanel versions Severity: High, full compromise of local databases, password retrieval Background:...
CVE-2004-0391
CVE-2004-0391 affects Cisco WLSE (Wireless LAN Solution Engine) versions 2.0–2.5 and HSE (Hosting Solution Engine) 1.7–1.7.3, which contain a hardcoded username and password. The root cause is hardcoded credentials allowing remote attackers to add new users, modify existing users, and change conf...
CVE-2004-0391: Undefined Security Weakness
Cisco Wireless LAN Solution Engine WLSE 2.0 through 2.5 and Hosting Solution Engine HSE 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration...
Cisco WLSE and HSE devices contain hardcoded username and password
Overview A default account with a common username and password exists in two Cisco products. An attacker with knowledge of this account information can compromise any of these devices on the network. Description A default account with a known, fixed username and password combination exists in som...
More Cpanel Vuls (cross site scripting)
Advisory Name: More Cpanel Vuls cross site scripting Discovered by: Fable Greets: 0x29A Crew, !AM Crew, Atomix, d3thstar, mgrd, rootthief.com. Version Tested On: cPanel Build 9.1.0-STABLE 93 Most likely effects more Description cPanel & WebHost Manager WHM is a next generation web hosting control...
Phpbb 2.0.7a And Earlier Secuity Issues
Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.7a && Earlier Risk : Multiple Vulnerabilities Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...