CVE-2002-0842

CVE-2002-0842 is a format-string vulnerability in Oracle’s mod_dav extension (used for logging gateway errors) that could enable remote code execution via a crafted destination URI triggering a 502 Bad Gateway. The vulnerability affects Oracle9i Application Server 9.0.2 (and related mod_dav code ...

Zope < 2.1.7 DocumentTemplate Unauthorized Modification

Binary data 1444.prm...

Solaris 2.5.1 (sparc) : 103743-01

SunOS 5.5.1: XFN source modifications for BIND 4.9.3. Date this patch was last updated by Sun : Jul/25/96 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...

AppSocket & socketAPI Printers - Do Not Scan

The host seems to be an AppSocket or socketAPI printer. Scanning it will likely waste paper. Therefore, port 9100 won't be scanned. This script was written by Laurent Facq 05/2004 99% based on dontscanprinters by Michel Arboi Released under GPLv2 plugin : dontprintonprinters.nasl after suggesting...

lftp <= 2.6.9 Remote Stack based Overflow Exploit

Exploit for linux platform in category remote exploits ================================================= lftp -p -r -t -f : create index.html -p : run a fake lftp server on port default: 80 -r : return address you would like to u...

MS Windows (RPC DCOM) Remote Exploit (Universal Targets)

No description provided by source. / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options...

CVE-2003-0303

CVE-2003-0303 corresponds to a SQL injection in OneOrZero Helpdesk 1.4 RC4. The vulnerability allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter (tupdate.php), affecting the integrity of the helpdesk data without affecting confidentiality. Connected source...

CVE-2002-1927

Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file...

Microsoft SQL Server Stored procedures [sp_MSSetServerPropertiesn and sp_MSsetalertinfo] &#40;#NISR03092002A&#41;

NGSSoftware Insight Security Research Advisory Name: spMSSetServerPropertiesn and spMSsetalertinfo Systems: Microsoft SQL Server 2000 Severity: Low Risk Category: Configuration Vendor URL: http://www.microsoft.com/ Author: David Litchfield [email protected] Advisory URL:...

Mandrake Security may make unexpected system modifications

Overview The Mandrake Security utility included with Mandrake Linux may make unexpected modifications that affect system security. Description Mandrake Linux includes a tool named Mandrake Security msec that allows system administrators to manage and audit various system parameters associated wit...

easynews 1.5 let&#39;s remote users modify database

Hey, that's my first submission so don't expect anything spectacular. There are a few bugs in Easynews 1.5: Short Description: Easynews 1.5 - database and templates remotly modifieable, cross site scripting, local users gain admin pass, and stuff : Found by: markus [email protected] Vendor...

CVE-1999-1095

The CVE-1999-1095 entry concerns the sort utility. It describes that sort creates temporary files and follows symbolic links, enabling a local user to modify arbitrary files writable by the user running sort. This impact is observed in updatedb and other programs that invoke sort. The documents d...

CVE-1999-1255

CVE-1999-1255 affects Hyperseek. The vulnerability allows a remote attacker to modify the Hyperseek configuration by directly invoking the admin.cgi program with an edit_file action parameter. Per the records, this is a network-exposed issue with no authentication required, enabling an integrity ...

Проблемы с rmuser в FreeBSD &#40;weak permissions&#41;

При изменении passwd-Файлов сначала создается новый файл и лишь потом устанавливаются корректные разрешения...

Проблемы в linux kernel &#40;sysctl и ptrace&#41;

Отрицательное смещение в вызове sysctl позволеят обращаться к памяти ядра, кроме того через ptrace можно изменить выполнение setuid процесса. На intel-архитектурах кроме того возможет DoS...

~..~!guano

Wednesday, 28 March, 2001 The BAT! .. is a feisty multi-tasking email client that is rapidly gaining popularity and for good reason. Cursory examination of it reveals solid effective security measures on all fronts, including non-browser dependent html viewing with on/off switch, random named fil...

CVE-2001-0047

The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server MTS packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities...

SystemWizard Registry Object ActiveX Control lacks authentication

Overview Description The SystemWizard "Registry Object" ActiveX Control may allow attackers to modify the registry on systems where the control is installed. This control was shipped on HP Pavilion computers running Windows 98, as part of a diagnostic application named "SystemWizard" produced by...

GPG 1.0.3 doesn&#39;t detect modifications to files with multiple signatures

Attached is multiple copies of a file I had signed. Then I started modifying parts of the SIGNED message. To see if gpg could detect that the messages had been altered. It did not detect them, so long as the last signed message had not been altered. Save this message as newfile.asc and run gpg...

CVE-2000-0579

IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited...