3922 matches found
screenapple.txt
Hi all, three days ago i discovered a security issue, with the last MacOSX. there is a way to crash the screensaver locked with password and gain the desktop. how? - you ask. i don't know the exact amount of characters, only that if you leave a key pressed for 5 minutes or more and then hit the...
Sun Management Center (SunMC) allows user to create or overwrite arbitrary files
Overview The Sun Management Center SunMC contains a vulnerability that could allow an attacker to create or overwrite any file on the system. Description An unknown vulnerability exists in the Sun Management Center SunMC, according to a Sun Alert Notification. According to that document,...
Dune Web Server GET Request Remote Overflow
The remote host is running a version of the Dune Web server that is older than 0.6.8. There is a flaw in this software that could be exploited by an attacker to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
PostNuke < 0.7.2.3 Multiple Script XSS
The remote host is running a version of PostNuke that is vulnerable to various cross-site scripting attacks. An attacker may use these flaws to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
NetWin CWmail.exe Item Parameter Remote Overflow
The CWMail.exe exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker may make use of this file to gain access to confidential data or escalate their privileges on the web server. %NASLMINLEVEL 70300 This script was written by John...
SmartFTP Multiple Command Response Overflow
The remote host is running SmartFTP - an FTP client. There is a flaw in the remote version of this software that could allow an attacker to execute arbitrary code on this host. To exploit it, an attacker would need to set up a rogue FTP server and have a user on this host connect to it. C Tenable...
[LeapFTP] "PASV" Reply Buffer Overflow Vulnerability
---------------------------------------------------------------------- SUMMARY : LeapFTP "PASV" Reply Buffer Overflow Vulnerability PRODUCT : LeapFTP VERSIONS : 2.7.3.600 VENDOR : LeapWare http://www.leapware.com/ SEVERITY : Critical. Code Execution. DISCOVERED BY : nesumin AUTHOR : :: Operash ::...
FTP Service < 1.2 - Multiple Vulnerabilities
FTP Service Multiple Vulnerabilities Vendor: Pablo Software Solutions Product: FTP Service Version: = 1.2 Website: http://www.pablovandermeer.nl/ftpservice.html BID: 7799 7801 Description: FTPService.exe is a service-version of Pablo's FTP Server. This service enables you to have the FTP server...
Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access
The remote FTP server is vulnerable to a flaw that allows users to access files outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : ftp quote stat ../ Some versions of VisNetic FTP Server and Titan FTP Server are known to be affected by this issue. C...
ST FTP Service Arbitrary File/Directory Access
The remote FTP server is vulnerable to a flaw that allows users to access files that are outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : CWD C: TRUSTED...
pam_xauth may insecurely forward "X MIT-Magic-Cookies" to new sessions
Overview A vulnerability exists in pamxauth that may allow a local attacker to gain access to an administrator's X session. Description pamxauth is used to forward xauth keys or cookies between users. From the pamxauth man page:Without pamxauth, when xauth is enabled and a user uses the su comman...
BadBlue ISAPI Extension .hts Crafted File Extension Request Authentication Bypass
The remote host is running the BadBlue web server earlier than 2.2. Such versions are reportedly affected by an authentication bypass vulnerability. It is possible for an attacker to gain administrative access using a filename with a .ats extension instead of a .hts extension. C Tenable Network...
SRT2003-04-24-1532 - Options Parsing Tool library buffer overflows.
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
ActivCard password cache memory leakage
In December of the 2002 I was analysing the ActivCard product for a client. During the analysis I noticed that making a memory dump of the process "scardsrv" was possible to obtain the users stored staticaly in the card. This issue at first, could seem smaller, although in depth already it has a...
[SECURITY] [DSA 283-1] New xfsdump packages fix insecure file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 283-1 [email protected] http://www.debian.org/security/ Martin Schulze April 11th, 2003 http://www.debian.org/security/faq -...
Flaw in Microsoft VM Could Enable System Compromise
TITLE : Microsoft Virtual Machine Bytecode Verifier Vulnerability CRITICAL : Highly critical IMPACT : System access OPERATING SYSTEM: Microsoft Windows 95 Microsoft Windows 98 and 98SE Microsoft Windows Millennium Microsoft Windows NT 4.0, beginning with Service Pack 1 Microsoft Windows 2000...
Apache vulnerable to DoS
Overview A remotely exploitable denial-of-service vulnerability exists in the Apache HTTP Server. Exploitation of this vulnerability may allow an attacker to consume all available system resources, resulting in a denial-of-service condition. Description The Apache HTTP Server is a very popular...
Vignette StoryServer TCL Server Crash Information Disclosure
The remote host is running Vignette StoryServer, a web interface to Vignette's Content Management suite. A flaw in this product may allow an attacker to extract information about the other users session and other sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Dat...
Sendmail < 8.12.9 NOCHAR Control Value prescan Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a remote buffer overflow allowing remote users to gain root privileges. Sendmail versions from 5.79 to 8.12.8 are vulnerable. NOTE: manual patches do not change the version numbers. Vendors who have released patched...
DCP-Portal Multiple Script Path Disclosure
DCP-Portal discloses its physical path when an empty request to adduser.php is made In addition, several other scripts may disclose the path if an invalid language is supplied, although Nessus has not checked for them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ahmet Sabri ALPER To:...