3922 matches found
Xitami Web Server Administration Port Remote Overflow
The remote host is running a vulnerable version of the Xitami web server. An attacker could exploit this by sending a lot of data to TCP port 81. This could lead to the execution of arbitrary code in the context of the web server, or create a denial of service. C Tenable Network Security, Inc...
OmniHTTPd imagemap.exe CGI Remote Overflow
The 'imagemap.exe' cgi is installed. This CGI is vulnerable to a buffer overflow that will allow a remote user to execute arbitrary commands with the privileges of your httpd server either nobody or root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
msie4-5.java.DoS.txt
Date: Mon, 9 Nov 1998 10:57:55 -0600 From: Aleph One To: [email protected] Subject: Major Explorer 4 java security hole! ---------- Forwarded message ---------- Date: Sun, 08 Nov 1998 05:04:27 +0100 From: Fabio Ciucci To: [email protected] Subject: NTSEC Major Explorer 4 java security hole!...
libc.nul.byte.txt
Date: Wed, 14 Oct 1998 11:42:46 +0200 From: Olaf Kirch To: [email protected] Subject: The poisoned NUL byte Summary: you can exploit a single-byte buffer overrun to gain root privs. When, half a day after releasing version 2.2beta37 of the Linux nfs server, I received a message from Larry...
hp5.txt
Date: Sat, 5 Sep 1998 19:47:29 -0600 From: [email protected] Subject: Another way to crash HP 5M/5N printers In addition to using nestea2 to crash any HP printer, I seem to have found a way to crash certain HP printers with a single perfectly legitimate SNMP packet. The potential impact of this...
+ + + ATH0 Modem Hang Up String Remote DoS
It was possible to disconnect the remote host by sending it an specially crafted ICMP echo request packet. It is also possible to make the remote modem hang up and dial any phone number. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10020; scriptversion"1.31";...
Lotus Notes SMTP Server HELO Command Overflow DoS
It was possible to perform a denial of service against the remote SMTP server by sending it two HELO commands followed by a too long argument. This allows an unauthenticated, remote attacker to deny service to legitimate users of the server. C Tenable Network Security, Inc. include"compat.inc";...
PT-1999-1028 · Hughes Technologies · Msql
Name of the Vulnerable Software and Affected Versions: mSQL versions 2.0.1 and below Description: The issue allows for remote execution through a buffer overflow. Recommendations: For versions 2.0.1 and below, update to a version above 2.0.1 to resolve the issue...
WEBgais 1.0 - Remote Command Execution
source: https://www.securityfocus.com/bid/2058/info WEBgais is a script that provides a web interface to the "gais" Global Area Intelligent Search search engine tool. All versions up to 1.0B2 are vulnerable. The vulnerable script is /cgi-bin/webgais: due to improper input checking it allows a...
Sendmail IDENT Remote root Vulnerability
Description A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old vulnerability. Technologies Affected Eric Allman Sendmail 8.6.9 Upgrade to at least version...
DUO-PSA-2018-001: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2018-001 Publication Date: 2018-03-06 Revision Date: 2018-03-06 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with our public documentation on the Duo Unix integration. The suggested Pluggable...
