Core Secrets — NSA Used ‘Undercover Agents’ In Foreign Companies

Sometimes we wonder that how the National Security Agency NSA reached such a wide range of its Surveillance operation across the world – which you can measure from several secret documents released by the former NSA contractor Edward Snowden. This hell parameter of the NSA’s operation was not...

Owl Intranet Engine 0.95 'register.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30410/info Owl Intranet Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

Owl Intranet Engine 0.7 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7595/info Owl has been reported prone to an authentication bypass vulnerability. The issue presents itself due to a lack of sufficient sanitization when checking the validity of usernames and passwords supplied to...

Ray Sharp DVR Password Retriever

This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems. It is possible to retrieve the username and password through the TCP service running on port 9000. Other brands using this platform and exposing the same issue may include Swann, Lorex, Night Owl, Zmodo,...

RedTeam Pentesting GmbH

Advisory: Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes The Owl Intranet Engine uses no salting in the password hashing procedure. Furthermore, users in the "Administrators" group are able to see the MD5 password hashes of every user using the web interface. Details...

[RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass

Advisory: Owl Intranet Engine: Authentication Bypass During a penetration test, RedTeam Pentesting discovered an Authentication Bypass vulnerability in the Owl Intranet Engine, which allows unauthenticated users administrative access to the affected systems. Details ======= Product: Owl Intranet...

Owl Intranet Engine 1.00 Authentication Bypass

Advisory: Owl Intranet Engine: Authentication Bypass During a penetration test, RedTeam Pentesting discovered an Authentication Bypass vulnerability in the Owl Intranet Engine, which allows unauthenticated users administrative access to the affected systems. Details ======= Product: Owl Intranet...

Owl Intranet Engine 1.00 - 'userid' Authentication Bypass

source: https://www.securityfocus.com/bid/51076/info Owl Intranet Engine is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication process and gain administrative access to the application. Owl Intranet Engine 1.00 is affected; other...

DEBIAN-CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

DEBIAN-CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

Buffer overflow

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

CVE-2009-0363 affects BarnOwl prior to 1.0.5 and Owl prior to 2.1.11. Multiple buffer overflows could allow remote code execution via (1) crafted zcrypt messages (zcrypt.c) or (2) a reply command on a message with a Zephyr Cc: list (zwrite.c), plus unspecified other uses. No patch/version fix is ...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3359

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

Cross Site Scripting XSS in Owl =0.95, CVE-2008-3100 References: https://vulners.com/cve/CVE-2008-3100 http://owl.sourceforge.net/ http://www.datensalat.eu/fabian/cve/CVE-2008-3100-Owl.html Description: Owl is a multi user document repository knowledgebase system for publishing files/documents on...