Midnight Commander

The Midnight Commander 4.5.51 latest. $ od -t x1 mcbug 0000000 03 14 77 04 0a $ mkdir cat mcbug $ mc try to view this directory - 'w' - 0x77 command will be executed; longer commands might be used, as well Obviously, this attack requires privledged user interaction. Midnight Commander won't displ...

Half Life - rcon Remote Buffer Overflow

Half Life - rcon Remote Buffer Overflow / SDI HalfLife rcon remote exploit for linux x86 portuguese exploit remoto para o buffer overflow do rcon no halflife Tamandua Sekure Labs Sao Paulo - Porto Alegre, Brazil by Thiago Zaninotti c0nd0r Gustavo Scotti csh Proof of concept - There is a remote...

SSH with Kerberos NFS Share Ticket Disclosure

The remote host is running a version of SSH which is older than or as old as version 1.2.27. There is a flaw in the remote version of this software which allows an attacker to eavesdrop the kerberos tickets of legitimate users of this service, as sshd will set their environment variable KRB5CCNAM...

DALnet Bahamut IRCd 4.6.5 - 'SUMMON' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1404/info Dalnet ircd is a server for a popular internet chat application, IRC Internet Relay Chat. The implementation for one of its features, the "summon" command, has a hole which could grant an attacker remote access on the host running the server...

WU-FTPD site_exec() Function Remote Format String

The version of WU-FTPD hosted on the remote server does not properly sanitize the argument of the SITE EXEC command. It may be possible for a remote attacker to gain root access. This script was written by Alexis de Bernis Changes by Tenable: - rely on the banner if we could not log in - changed...

Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON

-----BEGIN PGP SIGNED MESSAGE----- REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON 2000-06-14 SUMMARY: A remote user may execute certain FTP commands without authorization. IMPACT: A remote user may perform denial of service attacks. An attacker with access to a local account may gain unauthorized roo...

gssftp.txt

-----BEGIN PGP SIGNED MESSAGE----- REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON 2000-06-14 SUMMARY: A remote user may execute certain FTP commands without authorization. IMPACT: A remote user may perform denial of service attacks. An attacker with access to a local account may gain unauthorized roo...

beos5-dos.txt

AUX Technologies. Security Advisory. Advisory: Remote Denial of Service against Be/OS. Release Date: May 15, 2000. Status: No fix yet. Vulnerable version: Be/OS Personal 5.0 build feb 212000 4:43:00. Vendor: Contacted and no answer. Shoutz: AUX PPLbraSil rulez, dethl0k, cryonic, drk, grafspee and...

Symantec pcAnywhere 8.0.1/8.0.2/9.0/9.2 - Port Scan Denial of Service

source: https://www.securityfocus.com/bid/1150/info Performing a TCP SYN or TCP connect scan on a host running Symantec pcAnywhere will cause the program to crash. Restarting the application is required in order to regain normal functionality. nmap -sS target...

Mini SQL CGI content-length Field Remote Overflow

The mini-sql program comes with the w3-msql CGI which is vulnerable to a buffer overflow. An attacker may use it to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10296; scriptversion"1.40"; scriptcveid"CVE-2000-0012"...

MDaemon Connection Saturation Remote DoS

It was possible to crash the remote version of MDaemon by establishing a large number of connections to it. A remote attacker can exploit this to cause a denial of service. Note that due to the nature of this vulnerability, Nessus cannot be 100% positive on the effectiveness of this check. As a...

XtraMail POP3 PASS Command Remote Overflow

The remote POP3 server is vulnerable to the following buffer overflow : USER test PASS This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10325; scriptversion"1.48";...

Xitami Web Server Administration Port Remote Overflow

The remote host is running a vulnerable version of the Xitami web server. An attacker could exploit this by sending a lot of data to TCP port 81. This could lead to the execution of arbitrary code in the context of the web server, or create a denial of service. C Tenable Network Security, Inc...

OmniHTTPd imagemap.exe CGI Remote Overflow

The 'imagemap.exe' cgi is installed. This CGI is vulnerable to a buffer overflow that will allow a remote user to execute arbitrary commands with the privileges of your httpd server either nobody or root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

hp5.txt

Date: Sat, 5 Sep 1998 19:47:29 -0600 From: [email protected] Subject: Another way to crash HP 5M/5N printers In addition to using nestea2 to crash any HP printer, I seem to have found a way to crash certain HP printers with a single perfectly legitimate SNMP packet. The potential impact of this...

msie4-5.java.DoS.txt

Date: Mon, 9 Nov 1998 10:57:55 -0600 From: Aleph One To: [email protected] Subject: Major Explorer 4 java security hole! ---------- Forwarded message ---------- Date: Sun, 08 Nov 1998 05:04:27 +0100 From: Fabio Ciucci To: [email protected] Subject: NTSEC Major Explorer 4 java security hole!...

libc.nul.byte.txt

Date: Wed, 14 Oct 1998 11:42:46 +0200 From: Olaf Kirch To: [email protected] Subject: The poisoned NUL byte Summary: you can exploit a single-byte buffer overrun to gain root privs. When, half a day after releasing version 2.2beta37 of the Linux nfs server, I received a message from Larry...

+ + + ATH0 Modem Hang Up String Remote DoS

It was possible to disconnect the remote host by sending it an specially crafted ICMP echo request packet. It is also possible to make the remote modem hang up and dial any phone number. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10020; scriptversion"1.31";...

Lotus Notes SMTP Server HELO Command Overflow DoS

It was possible to perform a denial of service against the remote SMTP server by sending it two HELO commands followed by a too long argument. This allows an unauthenticated, remote attacker to deny service to legitimate users of the server. C Tenable Network Security, Inc. include"compat.inc";...

PT-1999-1028 · Hughes Technologies · Msql

Name of the Vulnerable Software and Affected Versions: mSQL versions 2.0.1 and below Description: The issue allows for remote execution through a buffer overflow. Recommendations: For versions 2.0.1 and below, update to a version above 2.0.1 to resolve the issue...