9635 matches found
CORRECTION to CODE: FormMail.pl can be used to send anonymous email
Hi All, I did a little playing with FormMail.pl after a run in with a spammer abusing our webserver. Apparently ALL FormMail.pl cgi-bin scripts can be used to spam anonymously. I found another server with FormMail.pl and tried the same exploit to send myself an email and it worked. The email will...
CVE-2001-0019
Arrowpoint (Cisco Content Services) is affected by a local DoS vulnerability where a long argument to the commands show script, clear script, show archive, clear archive, show log, or clear log can cause denial of service. The CVE description and NVD entry specify local access and partial availab...
CVE-2000-1179
Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters...
CVE-2000-1179
Netopia ISDN Router 650-ST prior to firmware 4.3.5 is affected. An unauthenticated attacker can read system logs by directly connecting to the login screen and sending certain control characters, exposing partial confidentiality without user interaction. The description does not specify firmware ...
CVE-2000-0967
CVE-2000-0967 affects PHP 3 and PHP 4 where user-supplied format strings are not properly sanitized in error log messages, enabling remote command execution via crafted error output. The vulnerability applies to PHP installations that log errors/warnings (format-string attacks via syslog/vsnprint...
Дырка в маршрутизаторах Netopia
нажатие комбинаций Ctrl-F и Ctrl-E в telnet-сеансе дают доступ к логам маршрутизатора до авторизации...
CVE-2000-0642
The WebActive HTTP Server 1.00 stores the web access log active.log in the document root, allowing remote viewing via direct requests and enabling information disclosure about site visitors. This relies on the default configuration. Remediation guidance from the connected data includes using a di...
RedHat 6.2 - Piranha Virtual Server Package Plaintext Password
source: https://www.securityfocus.com/bid/1367/info Password changes submitted to Red Hat Piranha via HTTP are insecurely passed as variables in a GET request. Unauthorized users could obtain the password by reading the httpd access log or by sniffing. ---------from...
FW-1 IP Fragmentation Vulnerability
DISCLAIMER It was never my intent to identify a DoS attack on FW-1. I was attempting to research and understand how FW-1 handles IP Fragmentation. Everthing that follows is a result of that research. Full findings of my research can be found at http://www.enteract.com/lspitz/fwtable.html...
sims-sds.txt
Date: Fri, 25 Dec 1998 19:51:56 PST From: Dana Jones Reply-To: Bugtraq List To: [email protected] Subject: Vulnerability SIMS 3.x Sun Internet Mail Server and SDS 1.x & 3.1 Sun LDAP Directory services vulnerability. /var/opt/SUNWconn/ldap/log/slapd.log is used to log ldap connects/operations. ...
quake2-bof-DoS.txt
Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...
favicon.ico.search.txt
Date: Fri, 16 Apr 1999 22:11:22 -0700 From: "Robert David Graham" Subject: favicon.ico In case you haven't heard, Microsoft has a new feature in IE 5.0 web browser. When you add a website to you "Favorites" aka. Bookmarks for you Netscape users, the browser attempts to download a graphic called...
RedHat Linux 5.1 / Caldera OpenLinux Standard 1.2 - Mountd
// source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even if the NFS server does not share any file systems. This...
IBM AIX 4.2.1 - '/usr/bin/portmir' Local Buffer Overflow / Insecure Temporary File Creation
/ source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowed malicious users to obtain root privileges. Secondly it wrote it's log files to a...
