940 matches found
IRIX (5.3/6.2/6.3/6.4/6.5/6.5.11) /usr/lib/print/netprint Local Exploit
Exploit for irix platform in category local exploits ======================================================================= IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 /usr/lib/print/netprint Local Exploit ======================================================================= !/bin/sh copyright LAST STAGE ...
CGI - mailnews.cgi vulnerability...
Hello BuGReaders... Script: mailnews.cgi Introduction: cat from source CGI-Script MAILNEWS 1.3 This script helps you to maintain a mailinglist. /cat Tested Version: 1.1, 1.3 Author dont parse some characters and he use very stupid "password protection". We can add or delete users from maillist...
CVE-2001-0100
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2001-0086
CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter...
CVE-2001-0086
CVE-2001-0086 affects CGI Script Center Subscribe Me LITE 2.0 and earlier. The vulnerability allows remote attackers to delete arbitrary mailing-list users by directly calling subscribe.pl with the target address as a parameter, without authentication. The NVD entry notes a CVSS v2 base score of ...
Security Advisory: Subscribe Me Lite 1.0 - 2.0 Unix or 1.0 - 2.0 NT and below.
note : This is not apparent in the commercial versions, tested on three different versions the author was notified and appropriate changes have since been made. product page - http://www.cgiscriptcenter.com/subscribe/index2.html vendor notice - Security Advisory: Users of Subscribe Me Lite 1.0 -...
ezmlm-cgi/ezmlm-idx-0.40 security advisory
Summary: ezmlm-cgi is part of the ezmlm-idx-0.40.tar.gz package and allows web access to mailing list archives. When ezmlm-cgi is installed SUID user other than root, it can be used to execute arbitrary commands with the effective uid of the SUID user. Scope: Default installations of ezmlm-idx-0....
Дырка в Subscribe Me
Любой желающий может удалить адрес из списка рассылки...
ezmlm-cgi
Package : ezmlm-0.53 and below ezmlm-cgi Announced: 2000-12-05 Ezmlm is an easy to use mailing list manager for qmail. It ships with a cgi application to allow for list archiving and reviewal over the web. Documentation states that the cgi should be installed suid root, but in real world...
UtilMind Mail List 1.7 - Users Can Execute Commands
Exploit for cgi platform in category web applications =================================================== UtilMind Mail List 1.7 - Users Can Execute Commands =================================================== !/usr/bin/perl -w Mailing List & News Version 1.7 / PoC Exploit. UtilMind Solutions /...
Linux news 27.09.00
Linux 2.2.18pre2aa2 Andrea Arcangeli выпустил следующую версию своей модификации ядра Linux для high-end серверов. Патч содержит поддержку до 4Gb памяти на платформе Intel, поддержку до 2Tb памяти на Alpha, улучшения VM для машин с большим объемом оперативки, Raw IO, улучшения SMP планировщика,...
CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (1)
CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration 1 source: https://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full...
CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (2)
source: https://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full administrative privileges which includes addition or removal of users from mailing...
userv security boundary tool 1.0.1 (SECURITY FIX)
-----BEGIN PGP SIGNED MESSAGE----- SUMMARY This is a combination security advisory and release announcement. GNU userv 1.0.0 and earlier versions have a vulnerability where under some conditions some local users may be able carry out unauthorised actions, or unlikely be able to take control of...
FreeBSD-SA-00:28.majordomo
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:28 Security Advisory FreeBSD, Inc. Topic: majordomo is not safe to run on multi-user machines Category: ports Module: majordomo Announced: 2000-07-05 Affects: Ports...
[SECURITY] Majordomo will be removed
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman June 3, 2000 - ------------------------------------------------------------------------ Package : majordomo Problem type : local...
majordomo.txt
Hi, Majordomo is a perl script for managing mailing lists. The package comes with several scripts and a program written in C wrapper that runs setuid to ensure that majordomo performs all the work with proper permissions for further information you can check the FAQ that comes with the package...
ISSalert: ISS Security Alert Summary: Volume 5 Number 3
ISS Security Alert Summary April 1, 2000 Volume 5 Number 3 X-Force Vulnerability and Threat Database: http://xforce.iss.net/ To receive these Alert Summaries, subscribe to the ISS Alert mailing list. Send an email to [email protected], and within the body of the message type: 'subscribe alert'...
ssh-1.2.27.txt
------------------------------------------------------------------- Periodically, the moderator of of the vuln-dev mailing list will post summaries of issues discussed there to Bugtraq and possibly other relevant lists. This will usually happen when an issue has been resolved, or it appears that...
eGroup.mailing.lists.txt
Date: Sat, 24 Apr 1999 08:59:19 +0300 From: Philip Stoev To: [email protected] Subject: eGROUPS security flaw eGROUPS wwww.egroups.com is a web site providing mailing list services. The mailing lists aka groups can be moderated, and the moderator can approve/revoke posted messages by sending...