6758 matches found
blackshell2: zml.cgi remote exploit
-----BEGIN PGP SIGNED MESSAGE----- --blackshell security advisory no2-- --zml.cgi remote exploit-- vendor details & history zml.cgi for webservers by jero.cc http://www.jero.cc/zml/zml.html details of exploit this is a classic CGI bug which uses ../../../../ to read remote files. example:...
RADIX1112200101
Team RADIX Research Report: RADIX1112200101 Date Published: 11-12-2001 Research Report ID: RADIX1112200101 Bugtraq ID: 3185 CVE CAN: N/A Title: RunAs Service Pipe Authentication Failure Class: Privilege Escalation and Information Disclosure Remotely Exploitable: No Locally Exploitable: Yes...
majordomo.1.94.4.txt
Hi, I found something to discuss, this time involving majordomo. This was tested on a Slackware linux 8.0 kernel 2.4.8; majordomo version 1.94.4, I also tested the other versions and all default installs had the same problem, note that the versions 1.94.1 an 1.94.2 should NOT be used anymore, tho...
Fwd: Microsoft Word macro vulnerability advisory MS01-034
Hi, Within minutes of Microsoft posting the bulletin on their site, my mailbox was swamped with emails from people asking the same two questions. I am therefore forwarding the below email minus the sample document! to the BugTraq mailing list to reach a wide audience and answer the two questions ...
IIS HACKING
Hi Folks, i have just compiled the well-known IIS tricks. I hope it will be helpful for securing your server. any comment,suggestion or insult...? wellcome MAB- SECURING IIS by BREAKING ===================================================== by Mount Ararat Blossom 9/15/2000...
Apache 1.3.14 available
Several security problems have been found in the Apache web server software. It is recommended that all users of Apache upgrade to the latest stable release to fix these problems. Apache is included in our N software series in the apache.tgz package. A new apache.tgz package including Apache 1.3....
MySQL Short Check String Authentication Bypass
The remote version of MySQL is older than or as old as version 3.22.30 or 3.23.10. Thus, it may allow attacker who knows a valid username to access database tables without a valid password. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid10343; scriptversion"1.31";...
Samba Web Administration Tool (SWAT) Detection
The remote host is running SWAT, the Samba Web Administration Tool. SWAT is a web-based configuration tool for Samba administration that also allows for network-wide MS Windows network password management. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10273;...
jetdirect.crash.txt
--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi folks! I just played with our network printer a HP LaserJet 4500 and -- boom -- it crashed ;-=20 The HP JetDirect J3111A module with firmware G.05.35 suffers from a buffer overflow in it's...
FreeBSD-SA-99:03.ftpd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:03 Security Advisory FreeBSD, Inc. Topic: Three ftp daemons in ports vulnerable to attack. Category: ports Module: wu-ftpd and proftpd Announced: 1999-09-05 Reissued:...
router-tcpaccess-DoS.txt
Date: Thu, 4 Feb 1999 11:05:31 -0600 From: HD Moore To: [email protected] Subject: Widespread Router Access Port DoS +-------- Router Access Port DoS The tcp access / configuration ports on most routers can be disabled remotely. These sit on port numbers like 23,2001,4001,6001, and 9001. The...
lotus.notes.crypto.txt
Date: Fri, 26 Mar 1999 21:25:10 GMT From: KevinLynch/CAM/[email protected] To: [email protected] Subject: Re: Lotus Notes security advisory Security Advisory Application: Lotus Notes Client R4.5 and Later Summary: As reported March 23, 1999 by Martin Bartosch of Deutsche Bank AG, there is a bug ...
nt4.java-vm.y2k.txt
Date: Tue, 23 Mar 1999 20:27:54 -0500 From: Andrew Kunz To: [email protected] Subject: additionally NT Y2K issue post SP4 It should also be pointed out that the java virtual machine that installs with IE on the sp4 CD is not y2k compliant either and needs to be upgraded...
PT-2009-6750 · Openssl +3 · Openssl +4
Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 0.9.8q OpenSSL versions 1.0.x prior to 1.0.0c openssl-devel-0.9.7a openssl-0.9.7a compat-openssl097g compat-openssl097g-32bit openssl prior to version 1.0.0e Description: The issue involves multiple vulnerabilities i...
An update for Windows Server Solutions Best Practices Analyzer 1.0 is available
None None...
PT-2012-6334 · Sam Leffler +3 · Tiff +4
Name of the Vulnerable Software and Affected Versions: libtiff versions prior to 4.0.2 tiff versions prior to 4.0.2-r1 libtiff3 versions prior to 3.9.4 libtiff-devel versions prior to 3.9.4 libtiff-x86 versions prior to 3.9.4 libtiff-32bit versions prior to 3.9.4 libtiff-64bit versions prior to...