[SA16364] Lasso Professional Auth Tag Security Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

ProRat Server 1.9 (Fix-2) - Buffer Overflow Crash (PoC)

ProRat Server 1.9 Fix-2 - Buffer Overflow Crash PoC / if this worked for you send me an email. /str0ke / / ProRat Server Buffer Overflow Crash POC http://www.prorat.net/products.php?product=ProRat Discovered and Coded by evil dabus e-mail: evildabus at yahoo.com Tested on ProRat Server version 1....

CVE-2005-2278

Stack-based buffer overflow in the IMAP daemon imapd in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name...

CVE-2005-2278

The CVE-2005-2278 issue affects MailEnable Professional IMAPD 1.54. A stack-based buffer overflow occurs in the IMAP STATUS command when handling long mailbox names, exploitable by an authenticated remote user to execute arbitrary code. Valid exploits are evidenced by multiple sources (Metasploit...

CVE-2005-2278

Stack-based buffer overflow in the IMAP daemon imapd in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name...

CVE-2005-2222

Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors...

CVE-2004-2194

CVE-2004-2194 – MailEnable DoS . Affected: MailEnable Professional Edition < 1.53 and Enterprise Edition

[VulnWatch] Blank Administrator password in DELL XP Professional install

Vulnerability in DELL Windows XP Professional - default hidden Administrator account allows local Administrator access Systems: DELLtm Laptops with Windowstm; Professional Vulnerable: DELL Laptops with pre installed Microsoft Windows XP Professional SP2 Not Vulnerable: DELL Laptops with Retail...

iDEFENSE Security Advisory 06.22.05: IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability

IpSwitch WhatsUp Professional 2005 SP1 SQL Injection Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=268&type=vulnerabilities June 22, 2005 I. BACKGROUND WhatsUp Professional 2005 SP1 is a network management solution for small and mid sized...

Ipswitch WhatsUp Professional Login.asp Multiple Field SQL Injection

The remote host is running Ipswitch WhatsUp Professional, a network management and monitoring package. The web front-end for WhatsUp Professional on the remote host is prone to a SQL injection attack because it fails to sanitize the 'sUserName' and 'sPassword' parameters in the 'Login.asp' script...

CVE-2005-1250

SQL injection vulnerability in the logon screen of the web front end NmConsole/Login.asp for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the 1 User Name field sUserName parameter or 2 Password sPassword parameter...

Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL...

KLA10228 ACE vulnerability in WhatsUp Professional

An SQL injection vulnerability was found in WhatsUp Professional. By exploiting this vulnerability malicious users can execute arbitrary SQL commands. This vulnerability can be exploited remotely at points related to the logon screen. Original advisories - Related products...

CVE-2002-1670

CVE-2002-1670 concerns Microsoft Windows XP Professional upgrade edition where applying an upgrade overwrites already installed Internet Explorer 6.0 patches, resulting in Internet Explorer being left unpatched. The connected sources reiterate this description without adding concrete exploit deta...

mast.txt

Hi list, Just found an implementation bug in MAST RunAsP.exe v3.5.1 and below, that allows local privilege escalation. Vendor: MAST-Computer Homepage of product : http://www.mast-computer.com/c9-s7-len.html Description of product: For Windows 2000, Windows XP RunAs Professional is a substitute fo...

CVE-2005-1412

SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter...

CVE-2005-1412

CVE-2005-1412 affects Ecomm Professional Guestbook 3.x. The vulnerability is a SQL injection in verify.asp that allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter. The Red Hat/ vendor CVE references corroborate the description. The documents do not provide explic...

CVE-2005-1412

SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter...

CVE-2005-0185

Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field...

CVE-2005-1348

CVE-2005-1348 corresponds to a buffer overflow in MailEnable’s HTTPMail service. Concrete details: affected products are MailEnable Enterprise (versions 1.04 and earlier) and MailEnable Professional (versions 1.54 and earlier). The overflow occurs via a long HTTP Authorization header, allowing a ...