Дырка в eTrust Access Control (SeOS)

Для удаленного администрирования используется rlogin-подобный протокол без авторизации с паролем, что позволяет атаки из локальной сети...

isc-dhcpd.exploit.txt

Somebody at OpenBSD discovered a possible root exploit in the ISC DHCP client. I can confirm that as of 6:23am on June 23rd after several hours of hacking around the sources I had the following dhcpd config running on my own machine's private network for testing: shared-network LOCAL-NET option...

Stake AntiSniff 1.0.1Researchers 1.0 - DNS Overflow (3)

Stake AntiSniff 1.0.1Researchers 1.0 - DNS Overflow 3 // source: https://www.securityfocus.com/bid/1207/info Certain versions of @Stake Inc.'s Antisniffer software contain a remotely exploitable buffer overflow. AntiSniff is a program that was released by L0pht Heavy Industries in July of 1999. I...

AVM KEN! ISDN Proxy Server Malformed Request Remote DoS

It was possible to crash the remote service - very likely Ken! ISDN Proxy Software - by sending it a non-HTTP request. Note that in the case of the Ken!, exploitation requires that the attacker be on the local network. C Tenable Network Security, Inc. include"compat.inc"; if description...

Wietse Venema Rpcbind Replacement 2.1 - Denial of Service

Wietse Venema Rpcbind Replacement 2.1 - Denial of Service source: https://www.securityfocus.com/bid/1893/info A remote root vulnerability exists in certain versions of rpcbind portmapper. RPC Remote Procedure Call allows a program to request a service from a program located in another computer in...