908 matches found
NetWare Core Protocol (NCP) Detection
The script checks the presence of a service supporting the NetWare Core Protocol NCP. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Wireshark NCP Parser Denial of Service Vulnerability (CNVD-2016-02649)
Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the epan/dissectors/packet-ncp2222.inc file in the NCP parser in versions 2.0.x prior to Wireshark 2.0.3 can be exploited by remote attackers to cause a...
Medusa - Speedy, Parallel and Modular Login Brute-Forcer
Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application: Thread-based parallel testing. Brute-for...
NetWare 6.5 SunRPC Portmapper CALLIT Stack 缓冲区溢出漏洞
No description provided by source...
Novell NetWare LSASS CIFS.NLM Driver Stack 缓冲区溢出漏洞
No description provided by source...
Microsoft Services MS06-066 nwwks.dll
No description provided by source. $Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Novell Groupwise 5.5/6.0 Servlet Gateway Default Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote attacker may gain access to the...
Novell Netware RPC XNFS xdrDecodeString Vulnerability
No description provided by source. !/usr/bin/ruby Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=24&Itemid=24 require 'socket' netwareserver = ARGV0 targetport = ARGV1 || 1234 beepbeep= \x1c\xd1\xef\xab + XID \x00\x00\x00\x00 + Message Type: Call 0...
Novell Netware 4.1/4.11 SP5B Remote.NLM Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/482/info The encrypted passwords for Remote.NLM are remotely accessible to anyone with the ability to view SYS:System\LDRemote.NCF. The password encryption algorithm for Remote.NLM has been broken and can be decrypted wit...
Novell NetWare 5.1/6.0 HTTP Post Arbitrary Perl Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5520/info A vulnerability has been reported in some versions of Novell NetWare. This issue lies in the handling of some HTTP requests when Perl is used as a handler by a web server. Reportedly, it is possible for an...
Novell Netware 4.1/4.11 SP5B NDS Default Rights Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and...
Novell Netware XNFS.NLM STAT Notify Remote Code Execution
No description provided by source. Application: Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-07 PRL: 2012-01 Author: Francis Provencher Protek Research Lab'...
Netware SMB Remote Stack Overflow PoC
No description provided by source...
Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution
No description provided by source. Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek...
Netscape Enterprise Web Server for Netware 4/5 5.0 Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/4874/info It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user. Netscape Enterprise Web Server for Netware contain several sample files which leak system...
Novell Netware Enterprise Web Server 5.1/6.0 env.bas Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose sensitive information, and load potentially...
Planex Mini-300PU & Mini100s Cross-site Scripting Vulnerability
No description provided by source. GotGeek Labs http://www.gotgeek.com.br/ Planex Mini-300PU & Mini100s Cross-site Scripting Vulnerability + Description Mini-300PU: The PLANEX Mini-300PU is the greatest network printing solution to both USB and Parallel printer ports. It provides 2 USB 2.0 and 1...
Novell Netware Enterprise Web Server 5.1/6.0 - Multiple XSS Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose sensitive information, and load potentially...
Apache 2.0 Encoded Backslash Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5434/info A directory traversal vulnerability exists in Apache versions 2.0.39 and earlier on non-Unix platforms potentially including Apache compiled with CYGWIN. Platforms that may be affected by this include Windows,...