Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...

Extreme Networks switches with ExtremeWare XOS allow arbitrary command execution

Overview Some Extreme Networks switches running ExtremeWare XOS have a vulnerability that allows a malicious authenticated user to escape to the underlying operating system command shell with administrator-level root privileges. Description Extreme Network switches running ExtremeWare XOS contain...

Default Password (debug) for 'user' Account

The account 'user' on the remote host has the password 'debug'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "user"; password = "debug"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

mdaemon72.txt

Summary: A privilege escalation flaw exists in MDaemon 7.2 http://www.mdaemon.com. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the MDaemon tray icon. Vulnerable Versions: MDaemon 7.2 Solutions: The vendor was notified of the issue. Ther...

Privilege escalation flaw in AClient Service for Windows (Version 5.6.181).

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

Privilege escalation in Mailtraq Version 2.6.1.1677.

Summary: A privilege escalation flaw exists in Mailtraq Version 2.6.1.1677 http://www.mailtraq.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while using the Mailtraq administration console. Vulnerable Versions: Mailtraq Version 2.6.1.1677. Solution: The...

mailtraq.txt

Summary: A privilege escalation flaw exists in Mailtraq Version 2.6.1.1677 http://www.mailtraq.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while using the Mailtraq administration console. Vulnerable Versions: Mailtraq Version 2.6.1.1677. Solution: The...

[Hat-Squad] SQL injection and XSS Vulnerabilities in HELM

Hat-Squad Advisory: SQL injection and XSS Vulnerabilities in HELM November 2, 2004 Product: HELM Web Hosting Control Panel Vendor URL: http://helm.webhostautomation.com Version: HELM 3.1.19 and lower Vulnerability: SQL injection and XSS Release Date: November 2, 2004 Vendor Status: Informed on 28...

SuSE-SA:2004:009: Linux Kernel

The remote host is missing the patch for the advisory SuSE-SA:2004:009 Linux Kernel. iDEFENSE Inc. informed us about a buffer overflow in the linux 2.4 kernel code which handles ISO9660 filesystems. The original code is not able to handle very long symlink names. The vulnerability can be triggere...

SYM04-008, Symantec Client Firewall Remote Access and Denial of Service Issues

Symantec Security Advisory SYM04-008 12 May, 2004 Symantec Client Firewall Remote Access and Denial of Service Issues Revision History None Risk Impact High Overview eEye Digital Security notified Symantec Corporation of four vulnerability issues they discovered in the Symantec Client Firewall...

All versions of Microsoft Internet Information Services, Remote buffer overflow (SYSTEM Level Access)

All versions of Microsoft Internet Information Services, Remote buffer overflow SYSTEM Level Access Release Date: June 18, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows NT 4.0 Internet Information Services 4.0 Microsoft Windows 2000 Internet Informatio...

Microsoft Windows 9x/ME - Share Level Password Bypass (1)

source: https://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It depends on password protection in...

Oracle Web Listener 4.0.x - for NT Batch File

Oracle Web Listener 4.0.x - for NT Batch File source: https://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on t...

Oracle Web Listener 4.0.x - for NT Batch File

source: https://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on the server, simply by appending '?&' and a...

CVE-1999-0344

NT users can gain debug-level access on a system process using the Sechole exploit...

CVE-1999-0344

CVE-1999-0344 concerns an NT local privilege escalation via the Sechole exploit, allowing debug-level access to a system process (local, no authentication; high impact on confidentiality, integrity, and availability per NVD). Connected citations reiterate NT users gaining debug-level access, with...