Remote Pre-Authentication Flaw Fixed in Samba

There is a serious remotely exploitable vulnerability in the Samba open-source software that could enable an attacker to gain root privileges without any authentication. The bug is in all versions of Samba from 3.0.x to 3.6.3, but has been fixed in Samba 3.6.4, which is the current stable release...

OSI Security: CheckPoint Firewall VPN - Information Disclosure

CheckPoint Firewall VPN1 - Information Disclosure Vulnerability http://www.osisecurity.com.au/advisories/checkpoint-firewall-securemote-hostname-information-disclosure Note: this is essentially a feature, but thought it may be useful for pen testers when deciding which system to attack. Release...

Sysax 5.53 SSH Username Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Sysax Multi Server versions 5.53 and below SSH username buffer overflow pre-authentication remote code execution exploit with egghunter shellcode that binds a shell to port 4444. !/usr/bin/python Title: Sysax " sys.exit1 host = sys.argv1 po...

Debian DSA-2375-1 : krb5, krb5-appl - buffer overflow

It was discovered that the encryption support for BSD telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to the Telnet port to execute arbitrary code with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

DSA-2375-1 krb5 - buffer overflow

Bulletin has no description...

CheckPoint Firewall-1 SecuRemote Topology Service Hostname Disclosure

This module sends a query to the port 264/TCP on CheckPoint Firewall-1 firewalls to obtain the firewall name and management station such as SmartCenter name via a pre-authentication request. The string returned is the CheckPoint Internal CA CN for SmartCenter and the firewall host. Whilst...

TomatoCart 1.1 pre-authentication local file inclusion flaw and fix-vulnerability warning-the black bar safety net

Title: TomatoCart 1.1 PostAuth Local File Include Author: brainpillow Download address Affect version: 1.1 Defect code analysis: if $osCCustomer-isLoggedOn === true if isset$REQUEST'module' $module = $REQUEST'module'; $osCLanguage-load$module; www.badguest.cn if isset$REQUEST'pdf' $pdf =...

Microsoft Windows SMB Server Remote Code Execution Vulnerability (2536275)

This host is missing an important security update according to Microsoft Bulletin MS11-048. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla! Component com_xcloner-backupandrestore - Remote Command Execution

Joomla! Component comxcloner-backupandrestore - Remote Command Execution !/usr/bin/python Joomla component comxcloner-backupandrestore remote code execution exploit Vendor: http://www.xcloner.com/ "Our true divinity is in our ability to create. And armed with the understanding of the symbiotic...

MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Heap Overflow

Exploit for windows platform in category dos / poc MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Contex...

Preemptive Protection against ProFTPD with mod_sql pre-authentication Vulnerability

A pre-authentication remote root heap overflow vulnerability was reported in the ProFTPD FTP Server. ProFTPD is a configurable GPL-licensed FTP server software...

Important: Red Hat Security Advisory: krb5 security and bug fix update

Updated krb5 packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

eDisplay Personal FTP Server 1.0.0 Pre-Authentication Crash

Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication Crash PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link: http://edisplay-personal-ftp-server.software.informer.com/ Tested on: Windo...

eDisplay Personal FTP Server 1.0.0 - Denial of Service (PoC)

eDisplay Personal FTP Server 1.0.0 - Denial of Service PoC Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link:...

httpdx 1.5.3b Pre-Auth Crash

Title: httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date: 13/03/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod...

httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS (PoC crash)

Exploit for windows platform in category dos / poc =================================================================== httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash =================================================================== Title: httpdx v1.5.3b Multiple - Remote...

httpdx 1.5.3b - Multiple Remote Denial of Service Vulnerabilities (PoC)

httpdx 1.5.3b - Multiple Remote Denial of Service Vulnerabilities PoC Title: httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date: 13/03/2010 Software link:...

(Gabriels FTP Server) Open Compact FTPd 1.2 - Remote Overflow

Gabriels FTP Server Open Compact FTPd 1.2 - Remote Overflow Title: Open & Compact FTPd Pre-Authentication Remote Exploit Written by: Lincoln Originally discovered by: loneferret Reference: http://www.exploit-db.com/exploits/11391/ Tested on: XPSP2 root@box: ./ftpd.py 192.168.139.130 Try connectin...

Open & Compact FTPd Pre-Authentication Remote Exploit

Exploit for unknown platform in category remote exploits ===================================================== Open & Compact FTPd Pre-Authentication Remote Exploit ===================================================== Title: Open & Compact FTPd Pre-Authentication Remote Exploit Written by: Linco...

Open And Compact FTPd Pre-Authentication Remote Exploit

Title: Open & Compact FTPd Pre-Authentication Remote Exploit Written by: Lincoln Originally discovered by: loneferret Reference: http://www.exploit-db.com/exploits/11391 Tested on: XPSP2 root@box: ./ftpd.py 192.168.139.130 Try connecting to host on port 4444 root@box: nc -vn 192.168.139.130 4444...