181 matches found
BSDI <= 4.0 tcpmux / inetd crash Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/66/info A vulnerability exists in inetd which allows a remote user to crash inetd if the tcpmux service is not commented out of /etc/inetd.conf. The tcpmux service is defined in RFC1078 $ nmap -p 1-64000 -i target host It...
CVE-2014-0911: Undefined Security Weakness
inetd in IBM WebSphere MQ 7.1.x before 7.1.0.5 and 7.5.x before 7.5.0.4 allows remote attackers to cause a denial of service disk or CPU consumption via unspecified vectors...
Raidsonic NAS Devices - Remote Command Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Raidsonic NAS Devices Unauthenticated...
Raidsonic NAS Devices Unauthenticated Remote Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Raidsonic NAS Devices Unauthenticated...
RHEL 6 : xinetd (RHSA-2013:0499)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:0499 advisory. The xinetd package provides a secure replacement for inetd, the Internet services daemon. xinetd provides access control for all services based on th...
Raidsonic NAS Devices Unauthenticated Remote Command Execution
Different Raidsonic NAS devices are vulnerable to OS command injection via the web interface. The vulnerability exists in timeHandler.cgi, which is accessible without authentication. This module has been tested with the versions IB-NAS5220 and IB-NAS4220. Since this module is adding a new user an...
CVE-2012-5095
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
CVE-2012-5095
CVE-2012-5095 affects Oracle Solaris 10, specifically the inetd(1M) component on both x86 and SPARC. The vulnerability is described as an unspecified issue in inetd that could allow local users to affect confidentiality, integrity, and availability via unknown vectors, with the Solaris 10 patchin...
CVE-2012-5095
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
CVE-2012-5095: Undefined Security Weakness
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to inetd...
Solaris 10 (x86) : 137098-02 (deprecated)
Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: inetd1M. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or...
Slackware Advisory SSA:2003-251-01 inetd DoS patched
The remote host is missing an update as announced via advisory SSA:2003-251-01. OpenVAS Vulnerability Test $Id: esoftslkssa200325101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2003-251-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD-SA-11:08.telnetd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:08.telnetd Security Advisory The FreeBSD Project Topic: telnetd code execution vulnerability Category: core Module: contrib Announced: 2011-12-23 Affects: All...
Hummingbird InetD LPD Component Buffer Overflow (CVE-2005-1815)
The Hummingbird InetD product provides Microsoft Windows PC platform users with some of the functionality of a UNIX host. The product provides server functions for TCP/IP based applications, enabling connectivity among Windows PCs and Unix hosts. A buffer overflow vulnerability exists in the LPD...
Create a UNIX back door for primary articles intermediate articles advanced article-vulnerability warning-the black bar safety net
The primary article The most simple method, is in the password file passwd to add a UID 0 account. But the best don't do it, because as long as the system administrator to check the password file will“drain the filling”. The following is in /etc/passwd password file, add a UID 0 account C Program...
Samba SWAT HTTP Authentication Buffer Overflow (CVE-2004-0600)
Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. SWAT is a web-based administrative tool that allows an administrator to edit and view a Samba configuration. SWAT commonly listens on por...
CVS Argumentx Command Double Free (CVE-2004-0416)
Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...
CVE-2009-2190
launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service individual service outage by making many connections to an inetd-based launchd service...