2420 matches found
Samba 2.2.x - 'nttrans' Remote Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Samba nttran...
CVE-2002-0575
OpenSSH CVE-2002-0575 describes a buffer overflow in OpenSSH up to 2.9.8 and in the 3.x line up to 3.2.0 (with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled). This allows remote and local authenticated users to gain privileges. Root cause: insecure handling of memory lead...
Half-Life StatsMe 2.6.x Plugin - CMD_ARGV Buffer Overflow
// source: https://www.securityfocus.com/bid/6575/info // The Half-Life StatsMe plug-in is prone to an exploitable buffer overflow condition. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context of...
Half-Life StatsMe 2.6.x Plugin - MakeStats Format String
// source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context o...
[SECURITY] [DSA 222-1] New xpdf packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 222-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2003 http://www.debian.org/security/faq -...
CVE-2002-2054
TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the validlevel cookie to admin...
RealServer 7-9 - Describe Buffer Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'msf/core/exploit/http'...
RealServer 7-9 Describe Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
ASI Sybase Security Alert: Buffer overflow in xp_freedll
Sybase Adaptive Server buffer overflow in xpfreedll extended stored procedure http://www.appsecinc.com/resources/alerts/sybase/02-0003.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level:...
Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1
PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Issued on: July 22, 2002 Software: PHP versions 4.2.0 and 4.2.1 Platforms: All The PHP Group has learned of a serious security vulnerability in PHP versions 4.2.0 and 4.2.1. An intruder may be able to execute arbitrary code with...
CVE-2002-0040
CVE-2002-0040 affects SGI IRIX 6.5.11–6.5.15f, where the HOSTALIASES environment variable can cause privileged applications to dump core, potentially enabling privilege escalation. The issue is local and was addressed by SGI in IRIX 6.5.16m/6.5.16f with patches; the advisory outlines affected com...
Solaris 8 dtspcd - Remote Heap Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Solaris dtsp...
Solaris 8 dtspcd Heap Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2002-0259
InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in 1 .pwd files in the miniportal/apache directory, or 2 mplog.txt, which could allow local users to gain privileges...
IRISconsole icadmin password vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRISconsole icadmin password vulnerability Number: 20020406-01-P Date: April 24, 2002 Reference: CAN-2002-0171 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that under certain...
Multiple vulnerabilities in SNMPv1 trap handling
Overview Multiple vendor SNMPv1 Trap handling implementations contain vulnerabilities that may allow unauthorized privileged access, denial-of-service conditions, or unstable behavior . If your site uses SNMP in any capacity, the CERT/CC encourages you to read the information provided below...
Compaq web-enabled management software contains buffer overflow in authentication username
Overview The Compaq web-enabled management software contains a buffer overflow in the authentication component of the product. Remote intruders may be able to execute arbitrary code with privileges on affected systems. Many Compaq products are affected, from personal computers to commercial UNIX...
Buffer overflow in MySQL < 3.23.31
Hi, all versions of MySQL 3.23.31 have a buffer-overflow which crashs the server and which seems to be exploitable ie. 4141414 in eip Problem : An attacker could gain mysqld privileges gaining access to all the databases Requirements : You need a valid login/password to exploit this Solution :...
Itetris 1.6.1/1.6.2 - Privileged Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/2139/info Itetris, or "Intelligent Tetris", is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video hardware when run by a regular user. Itetris contains a...
