Symantec Backup Exec远程绕过认证及缓冲区溢出漏洞

BUGTRAQ ID: 32346,32347 Symantec Backup Exec是一款全面的数据备份解决方案。 Backup Exec的远程代理所使用的一些认证方式中存在多个错误，可能允许用户绕过认证获得非授权访问，读取或删除任意文件；此外数据管理协议中还存在缓冲区溢出漏洞。远程攻击者可以通过前一个漏洞认证为特权用户，然后触发缓冲区溢出导致执行任意指令。 Symantec Backup Exec for Windows Servers 12.5 Symantec Backup Exec for Windows Servers 12.0 Symantec Backup Exec f...

Natterchat 1.1 - Remote Authentication Bypass

============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad === XPL === »...

Natterchat 1.1 - Remote Authentication Bypass

Natterchat 1.1 - Remote Authentication Bypass ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover:...

CVE-2008-5173

Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors...

USN-669-1: gnome-screensaver vulnerabilities

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

AJ ARTICLE Remote Authentication Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

AJ Article 1.0 - Remote Authentication Bypass

AJ Article 1.0 - Remote Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

AJ Article 1.0 - Remote Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

AJ ARTICLE Remote Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ===================================================== AJ ARTICLE Remote Authentication Bypass Vulnerability ===================================================== =============================================================================...

MyioSoft Ajax Portal 3.0 - Authentication Bypass

MyioSoft Ajax Portal 3.0 - Authentication Bypass MyioSoft Ajax Portal 3.0 Remote Auth Bypass Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 07.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...

Sql injection

SQL injection vulnerability in the "Manage pages" feature admin/pages in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the searchpublishedat parameter...

Apoll 0.7b (SQL Injection) Remote Auth Bypass Vulnerability

No description provided by source. Apoll version Remote Auth Bypass Vulnerability version: beta 0.7 script dwonload: http://www.miticdjd.com/download/3/ ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact:...

TR News 2.1 - 'login.php' Remote Authentication Bypass

?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zip File admin/login.php 1. ? 2...

TR News 2.1 - login.php Remote Authentication Bypass

TR News 2.1 - login.php Remote Authentication Bypass ?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit...

AJ ARTICLE (SQL Injection) Remote Auth Bypass Vulnerability

No description provided by source. Discovered by : Hakxer Type Gap : Auth Bypass Script : AJ ARTICLE Greetz : Allah , Egyptian x hacker , Br1ght D@rk First Go to http://www.ajsquare.com/products/demo/admin/index.php In username Write : admin ' or ' 1=1 In Password Any thing : Hakxer Click Login ....

CVE-2008-4791

Drupal security advisory CVE-2008-4791 affects Drupal 5.x before 5.11 and 6.x before 6.5. The user module allows remote authenticated users to bypass login access rules and log in via unknown vectors. This is reported alongside other issues in the same release (e.g., CVE-2008-4790, CVE-2008-4792,...

CVE-2008-4762

Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service service crash and potentially execute arbitrary code via a long argument to the 1 rename and 2 realpath parameters...

CVE-2008-4651

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...

CVE-2008-4602

Post Affiliate Pro 2.0 is affected by a directory traversal vulnerability in index.php. Remote authenticated users can use a .. in the md parameter to read and potentially execute arbitrary local files. CVSS v2 base score 6.5 (Medium) with network access, single authentication, and partial impact...

Design/Logic Flaw

The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process aka Flow Process view...