Ecartis 1.0.0/0.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities (2)

// source: https://www.securityfocus.com/bid/4271/info Ecartis is the new name for the Listar software product. Listar is a mailing list management package for Linux, BSD, and other Unix like operating systems. Multiple local buffer overflow conditions have been reported in some versions of...

[SA-2002:00] Slashcode login vulunerability

SA-2002:00 Slashcode login vulunerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a vulnerability in recent versions that allows any logged-in user to log in as any other user. This allows users to take nearly full control of a Slash system post...

IMail Web Service User Aliases / Mailing Lists Admin Vulnerability

IMail Web Service User Aliases / Mailing Lists Admin Vulnerability Date : January 1, 2002 Author : Zeeshan Mustafa [email protected] Application : IPSwitch IMail Web Service Versions Test : 7.05/7.04/7.03/7.02/7.01/6.x Exploitable : Remote Vendor Status : Notified Impact of vulnerability :...

OpenBSD ftp Exploit (teso)

Exploit for bsd platform in category local exploits ========================== OpenBSD ftp Exploit teso ========================== / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO...

CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the 1 aliasadmin or 2 listadm1 CGI programs, which do not properly verify that an administrator is the...

[SECURITY] [DSA-088-1] improper character escaping in fml

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-088-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 5, 2001 -...

Mac OS X setuid root security hole

I can't recall if I have seen this on BugTraq so forgive me if this is an old issue. Try these steps on an OS X machine not logged in as root - Open up the terminal application - Quit the terminal application - Open up NetInfo Manager leave it in the foreground - Open up the Terminal application...

IRIX (5.3/6.2/6.3/6.4/6.5/6.5.11) /usr/lib/print/netprint Local Exploit

Exploit for irix platform in category local exploits ======================================================================= IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 /usr/lib/print/netprint Local Exploit ======================================================================= !/bin/sh copyright LAST STAGE ...

CGI - mailnews.cgi vulnerability...

Hello BuGReaders... Script: mailnews.cgi Introduction: cat from source CGI-Script MAILNEWS 1.3 This script helps you to maintain a mailinglist. /cat Tested Version: 1.1, 1.3 Author dont parse some characters and he use very stupid "password protection". We can add or delete users from maillist...

CVE-2001-0086

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter...

CVE-2001-0100

bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...

CVE-2001-0086

CVE-2001-0086 affects CGI Script Center Subscribe Me LITE 2.0 and earlier. The vulnerability allows remote attackers to delete arbitrary mailing-list users by directly calling subscribe.pl with the target address as a parameter, without authentication. The NVD entry notes a CVSS v2 base score of ...

ezmlm-cgi/ezmlm-idx-0.40 security advisory

Summary: ezmlm-cgi is part of the ezmlm-idx-0.40.tar.gz package and allows web access to mailing list archives. When ezmlm-cgi is installed SUID user other than root, it can be used to execute arbitrary commands with the effective uid of the SUID user. Scope: Default installations of ezmlm-idx-0....

Дырка в Subscribe Me

Любой желающий может удалить адрес из списка рассылки...

Security Advisory: Subscribe Me Lite 1.0 - 2.0 Unix or 1.0 - 2.0 NT and below.

note : This is not apparent in the commercial versions, tested on three different versions the author was notified and appropriate changes have since been made. product page - http://www.cgiscriptcenter.com/subscribe/index2.html vendor notice - Security Advisory: Users of Subscribe Me Lite 1.0 -...

ezmlm-cgi

Package : ezmlm-0.53 and below ezmlm-cgi Announced: 2000-12-05 Ezmlm is an easy to use mailing list manager for qmail. It ships with a cgi application to allow for list archiving and reviewal over the web. Documentation states that the cgi should be installed suid root, but in real world...

UtilMind Mail List 1.7 - Users Can Execute Commands

Exploit for cgi platform in category web applications =================================================== UtilMind Mail List 1.7 - Users Can Execute Commands =================================================== !/usr/bin/perl -w Mailing List & News Version 1.7 / PoC Exploit. UtilMind Solutions /...

Linux news 27.09.00

Linux 2.2.18pre2aa2 Andrea Arcangeli выпустил следующую версию своей модификации ядра Linux для high-end серверов. Патч содержит поддержку до 4Gb памяти на платформе Intel, поддержку до 2Tb памяти на Alpha, улучшения VM для машин с большим объемом оперативки, Raw IO, улучшения SMP планировщика,...

CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (2)

source: https://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full administrative privileges which includes addition or removal of users from mailing...

CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (1)

CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration 1 source: https://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full...