142 matches found
Raidsonic NAS Devices Unauthenticated Remote Command Execution
Different Raidsonic NAS devices are vulnerable to OS command injection via the web interface. The vulnerability exists in timeHandler.cgi, which is accessible without authentication. This module has been tested with the versions IB-NAS5220 and IB-NAS4220. Since this module is adding a new user an...
RHEL 6 : xinetd (RHSA-2013:0499)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:0499 advisory. The xinetd package provides a secure replacement for inetd, the Internet services daemon. xinetd provides access control for all services based on th...
CVE-2012-5095
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
CVE-2012-5095
CVE-2012-5095 affects Oracle Solaris 10, specifically the inetd(1M) component on both x86 and SPARC. The vulnerability is described as an unspecified issue in inetd that could allow local users to affect confidentiality, integrity, and availability via unknown vectors, with the Solaris 10 patchin...
CVE-2012-5095
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
Solaris 10 (x86) : 137098-02 (deprecated)
Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: inetd1M. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or...
Slackware Advisory SSA:2003-251-01 inetd DoS patched
The remote host is missing an update as announced via advisory SSA:2003-251-01. OpenVAS Vulnerability Test $Id: esoftslkssa200325101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2003-251-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD-SA-11:08.telnetd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:08.telnetd Security Advisory The FreeBSD Project Topic: telnetd code execution vulnerability Category: core Module: contrib Announced: 2011-12-23 Affects: All...
Hummingbird InetD LPD Component Buffer Overflow (CVE-2005-1815)
The Hummingbird InetD product provides Microsoft Windows PC platform users with some of the functionality of a UNIX host. The product provides server functions for TCP/IP based applications, enabling connectivity among Windows PCs and Unix hosts. A buffer overflow vulnerability exists in the LPD...
Create a UNIX back door for primary articles intermediate articles advanced article-vulnerability warning-the black bar safety net
The primary article The most simple method, is in the password file passwd to add a UID 0 account. But the best don't do it, because as long as the system administrator to check the password file will“drain the filling”. The following is in /etc/passwd password file, add a UID 0 account C Program...
Samba SWAT HTTP Authentication Buffer Overflow (CVE-2004-0600)
Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. SWAT is a web-based administrative tool that allows an administrator to edit and view a Samba configuration. SWAT commonly listens on por...
CVS Argumentx Command Double Free (CVE-2004-0416)
Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...
CVE-2009-2190
launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service individual service outage by making many connections to an inetd-based launchd service...
Solaris Update for at/atrm/batch/cron/inetd 109008-28
Check for the Version of at/atrm/batch/cron/inetd OpenVAS Vulnerability Test Solaris Update for at/atrm/batch/cron/inetd 109008-28 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for at/atrm/batch/cron/inetd 109008-28
Check for the Version of at/atrm/batch/cron/inetd OpenVAS Vulnerability Test Solaris Update for at/atrm/batch/cron/inetd 109008-28 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for at/atrm/batch/cron/inetd 109007-28
Check for the Version of at/atrm/batch/cron/inetd OpenVAS Vulnerability Test Solaris Update for at/atrm/batch/cron/inetd 109007-28 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for at/atrm/batch/cron/inetd 109007-28
Check for the Version of at/atrm/batch/cron/inetd OpenVAS Vulnerability Test Solaris Update for at/atrm/batch/cron/inetd 109007-28 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris/x86 - add services and execve inetd - 201 bytes
No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / char c0de =...