QNX RTOS 4.256.1 - su Password Hash Disclosure

QNX RTOS 4.256.1 - su Password Hash Disclosure source: https://www.securityfocus.com/bid/4914/info It has been reported that the 'su' utility for QNX RTOS accepts the SIGSEGV signal and dumps a world readable core file. An attacker is able to analyze the core file and obtain very sensitive...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...

Дырка в серверных продуктах Netscape

Хэш пароля администрирования содержится в файле открытом на чтение: http://www.server.com/admin-serv/config/admpw...

sawmill-5.0.21.txt

Version: Sawmill 5.0.21 Vendor: Notified. Link: http://www.flowerfire.com/sawmill [email protected] http://vapid.betteros.org SawMill is a site log statistics package for UNIX, Windows and MacOS. I have been evaluating it under Linux. In my test configuration I have sawmill listening on port...

CVE-1999-0994

SYSKEY in Windows NT pre-December 1999 had a flaw that reuses part of an RC4 keystream to encrypt the SAM database. This enables dictionary attacks against SAM passwords if an attacker obtains a copy of the SAM database. Microsoft addressed this in December 1999 (MS99-056). The CERT advisory reit...