LBEhelpdesk.txt

LBE Web HelpDesk SQL Injection Summary Leigh Business Enterprises's Web HelpDesk is "operated entirely through your web browser and is designed to be used by both your support staff and your customers". We found the product to contain at least one exploitable SQL Injection vulnerability that woul...

[NT] LBE Web HelpDesk SQL Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[UNIX] Pivot Remote Code Execution Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Yabb SE SQL Injection

Summary: YaBB SE is a PHP/MySQL port of the popular forum software YaBB yet another bulletin board. An SQL Injection vulnerability in the product allows a remote attacker to insert malicious SQL statements. Details: Vulnerable Systems: Yabb Se version 1.5.4 tested, 1.5.3tested maybe others Immune...

[UNIX] Multiple Vulnerabilities MetaDot Portal Server

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[NT] Xlight FTP Server Directory Traversal and DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ftp_banner.txt

Banner Buffer Overflows found in Multible FTP Clients Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY A client side vulnerability in the product allows remote servers to cause the client to crash by sending it a large...

Directory traversal vulnerabilities found in NITE ftp-server version 1.83

Directory traversal vulnerabilities found in NITE ftp-server version 1.83 Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY The NiteServer is a simple FTP-Server program with some special features. It is free and easy to...

TFTPD32 Directory Traversal Vulnerability

Advisory available at: http://www.securiteam.com/windowsntfocus/6D00D2061G.html TFTPD32 Directory Traversal Vulnerability -------------------------------------------- SUMMARY http://tftpd32.jounin.net TFTPD32 is a Freeware TFTP server for windows 9x/NT/XP. It provides an implementation of the...

[EXPL] GoodTech's FTP Server vulnerable to a DoS (RNTO)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com GoodTech's FTP Server vulnerable to a DoS RNTO ---------------------------------------------------------------------------- SUMMARY...