908 matches found
SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7723)
The OES Netware add-ons in pure-ftpd had a security problem and some bugs, which are fixed by this update. A local attacker could overwrite local files when the OES remote server feature of pure-ftpd is enabled due to a directory traversal. CVE-2011-3171 Additionally the following bugs have been...
Novell NetWare 6.5 OpenSSH Remote Stack Buffer Overflow
The version of OpenSSH running on the remote Novell NetWare host has a stack-based buffer overflow vulnerability. When attempting to resolve an absolute path on the server, data is copied into a 512 byte buffer without any bounds checking. A remote, authenticated attacker could exploit this to...
Novell NetWare 6.5 Support Pack 1.1 Admin/Install Local Information Disclosure
According to the list of enumerated software packages, the version of Novel NetWare installed on the remote host may have an information disclosure vulnerability. Admin/install passwords are stored in the NIOUTPUT.TXT and NI.LOG installation log files. A local attacker could exploit this to gain...
Upload directory traversal in Novell ZenWorks Handheld Management 7.0.2
Luigi Auriemma Application: Novell ZenWorks Handheld Management http://www.novell.com/products/zenworks/handhelds/ Versions: = 7.0.2.61213 Platforms: Windows, Linux, NetWare Bug: upload directory traversal Exploitation: remote, versus server Date: 27 Jun 2011 found 25 Apr 2011 Author: Luigi...
Off-by-one in Sybase Advantage Server 10.0.0.3
Luigi Auriemma Application: Sybase Advantage Server http://www.sybase.com/products/databasemanagement/advantagedatabaseserver Versions: = 10.0.0.3 Platforms: Windows, NetWare, Linux Bug: off-by-one Exploitation: remote, versus server Date: 27 Jun 2011 found 29 Oct 2010 Author: Luigi Auriemma...
Sybase Advantage Server 10.0.0.3 - 'ADS' Process Off-by-One Buffer Overflow
source: https://www.securityfocus.com/bid/48464/info Sybase Advantage Server is prone to an off-by-one buffer-overflow vulnerability. Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-servic...
Sybase Advantage Server 10.0.0.3 - ADS Process Off-by-One Buffer Overflow
Sybase Advantage Server 10.0.0.3 - ADS Process Off-by-One Buffer Overflow source: https://www.securityfocus.com/bid/48464/info Sybase Advantage Server is prone to an off-by-one buffer-overflow vulnerability. Attackers may exploit this issue to execute arbitrary code within the context of the...
broadcast-novell-locate NSE Script
Attempts to use the Service Location Protocol to discover Novell NetWare Core Protocol NCP servers. Example Usage nmap -sV --script=broadcast-novell-locate Script Output Pre-scan script results: | broadcast-novell-locate: | Tree name: CQURE-LABTREE | Server name: linux-l84t | Addresses |...
Novell Netware XNFS.NLM Stack Buffer Overflow (CVE-2010-4227)
Novell Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. A stack buffer overflow vulnerability exists in Novell Netware product. A remote attacker could trigger this flaw by sending a malicious NFS RPC request to the...
Novell Netware AFP Remote Denial of Service
Novell Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. A denial of service vulnerability exists in Novell Netware. An attacker could consistently attack a target system, making it difficult, or impossible, to use t...
ncp-serverinfo NSE Script
Retrieves eDirectory server information OS version, server name, mounts, etc. from the Novell NetWare Core Protocol NCP service. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 524/tcp open ncp | ncp-serverinfo: | Server name: LINUX-L84T | Tree Name: IIT-LABTREE | OS Version: 5.70 rev...
Novell eDirectory/Netware LDAP-SSL后台程序漏洞
Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory/Netware LDAP-SSL后台程序在实现上存在拒绝服务漏洞，由于系统不恰当地分配用户指定的内存量，攻击者可利用此漏洞造成系统范围内的拒绝服务。 Novell Netware Novell eDirectory 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.novell.com/security-alerts !/usr/bin/perl usage: ./novell.pl 10.0.0.1...
NSENSE-2011-002: Novell eDirectory/Netware LDAP-SSL daemon
nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...
Novell eDirectoryr / Netware DoS
Memory exhaustion on LDAP-SSL processing...
Novell Netware eDirectory - Denial of Service
Novell Netware eDirectory - Denial of Service nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service...
Novell LDAP-SSL Daemon Denial Of Service
nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...
Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service
Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl...
Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service
source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl usage: ./novell.pl 10.0.0.1 0x41424344 use IO::Socket::SSL; $socket =...
Novell Netware eDirectory - Denial of Service
nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...
Novell Netware eDirectory DoS Vulnerability
Exploit for windows platform in category dos / poc nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Servi...