[SA19589] Debian mnogosearch Insecure Password Storage Security Issue

TITLE: Debian mnogosearch Insecure Password Storage Security Issue SECUNIA ADVISORY ID: SA19589 VERIFY ADVISORY: http://secunia.com/advisories/19589/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: Local system OPERATING SYSTEM: Debian GNU/Linux 3.1...

Mnogosearch search.cgi Detection

Binary data 2499.prm...

CVE-2004-1059

Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...

CVE-2004-1059

CVE-2004-1059 describes multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch, affecting version 3.2.26 and earlier. The issues allow remote attackers to inject arbitrary HTML and web script via the next/prev result search pages and the extended and simple search forms. The connected...

CVE-2004-1059

Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...

CVE-2004-0288

Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document...

CVE-2004-0288

CVE-2004-0288 affects mnoGoSearch versions 3.2.13–3.2.15, where a buffer overflow in UdmDocToTextBuf could allow a remote attacker to execute arbitrary code by indexing a large document. The OpenVAS/OpenBSD/NVD entries confirm the vulnerability and impact, but no patch/version fix is specified in...

CVE-2004-0288

Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document...

[CLA-2003:711] Conectiva Security Announcement - mnogosearch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : mnogosearch SUMMARY : Remote buffer overflow...

CVE-2003-0437

Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter...

CVE-2003-0436

Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter...

CVE-2003-0437

Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter...

CVE-2003-0437

The CVE-2003-0437 entry concerns the mnoGoSearch 3.2.10 search.cgi CGI. A buffer overflow is triggered by a long tmplt parameter, allowing remote attackers to execute arbitrary code. Connected sources corroborate a history of remote-overflow vulnerabilities in the mnoGoSearch search.cgi component...

CVE-2003-0436

The CVE-2003-0436 issue affects mnoGoSearch 3.1.20, with a buffer overflow in search.cgi triggered by a long ul parameter that enables remote code execution with the webserver’s privileges. The Conectiva advisory Colorado 2003:711 notes this vulnerability and provides upgrade guidance to a newer ...

mnoGoSearch search.cgi Multiple Parameter Remote Overflows

The mnoGoSearch search.cgi CGI is installed on the remote web server. Older versions of this software have multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues to execute arbitrary code. Note that Nessus only detected the presence of this CGI, and did not attempt...

mnoGoSearch 3.1.20 - Remote Command Execution

mnoGoSearch 3.1.20 - Remote Command Execution !/usr/bin/perl reloaded Remote Exploit for mnoGoSearch 3.1.20 that performs remote command execution as the webserver user id for linux ix86 by pokleyzz use IO::Socket; $host = "127.0.0.1"; $cmd = "ls -la"; $searchpath = "/cgi-bin/search.cgi"; $rawret...

MNOGoSearch 3.1.20 - search.cgi?UL Remote Buffer Overflow (1)

MNOGoSearch 3.1.20 - search.cgi?UL Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI...

MNOGoSearch 3.1.20 - 'search.cgi?UL' Remote Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the 'search.cgi' application. It may ...

mnoGoSearch 3.1.20 Remote Command Execution Exploit

Exploit for linux platform in category remote exploits =================================================== mnoGoSearch 3.1.20 Remote Command Execution Exploit =================================================== !/usr/bin/perl reloaded Remote Exploit for mnoGoSearch 3.1.20 that performs remote...

mnoGoSearch 3.1.20 - Remote Command Execution

!/usr/bin/perl reloaded Remote Exploit for mnoGoSearch 3.1.20 that performs remote command execution as the webserver user id for linux ix86 by pokleyzz use IO::Socket; $host = "127.0.0.1"; $cmd = "ls -la"; $searchpath = "/cgi-bin/search.cgi"; $rawret = 0xbfff105c; $ret = ""; $suffsize = 0; $port...