Qualcomm qpopper 2.533.0 RedHat imap 4.5 -4 UoW imap 4.5 popd - Lock File Denial of Service

Qualcomm qpopper 2.533.0 RedHat imap 4.5 -4 UoW imap 4.5 popd - Lock File Denial of Service source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, an...

AVM KEN! 1.3.101.4.30 - Remote Denial of Service

AVM KEN! 1.3.101.4.30 - Remote Denial of Service source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular...

AVM KEN! 1.3.10/1.4.30 - Remote Denial of Service

source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular web file structure, and appending the remaining...

CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption (1)

// source: https://www.securityfocus.com/bid/1097/info CRYPTOCard CRYPTOAdmin is a network authentication application for use with the Palm OS platform. CRYPTOAdmin generates a .pdb file which contains the username, PIN number, serial number, and key in encrypted or plaintext format. The PIN numb...

CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption (2)

source: https://www.securityfocus.com/bid/1097/info CRYPTOCard CRYPTOAdmin is a network authentication application for use with the Palm OS platform. CRYPTOAdmin generates a .pdb file which contains the username, PIN number, serial number, and key in encrypted or plaintext format. The PIN number...

CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption (1)

CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption 1 // source: https://www.securityfocus.com/bid/1097/info CRYPTOCard CRYPTOAdmin is a network authentication application for use with the Palm OS platform. CRYPTOAdmin generates a .pdb file which contains the username, PIN number, serial number, and key...

Cobalt RaQ 2.0/3.0 - Apache .htaccess Disclosure

source: https://www.securityfocus.com/bid/1083/info The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a website hosted on the server. Make a...

Microsoft Index Server 2.0 - %20 ASP Source Disclosure

Microsoft Index Server 2.0 - %20 ASP Source Disclosure source: https://www.securityfocus.com/bid/1084/info Index Server can be used to cause IIS to display the source of .asp and possibly other server-side processed files. By appending a space %20 to the end of the filename specified in the...

Дырка в Tomcat

приложение-пример jsp/source.jsp может быть использовано для получение любого файла с локальной машины используя обратный путь в директориях...

CVE-2000-0058

CVE-2000-0058 affects HotSync Manager (Handsᴘʀᴛ Visor ecosystem). The OpenVAS NASL entry describes a Denial of Service: sending garbage to TCP port 14238 can crash HotSync Manager. CVSS 2.0 base score 5.0 (Network, low complexity, no authentication). The NVD/CVE records cite an authentication iss...

Tektronix Phaser Network Printer 740750750DP840930 PhaserLink WebServer - Retrieve Administrator Password

Tektronix Phaser Network Printer 740750750DP840930 PhaserLink WebServer - Retrieve Administrator Password source: https://www.securityfocus.com/bid/806/info Certain versions of the Tektronix PhaserLink printer ship with a webserver designed to help facilitate configuration of the device. This...

CGI City CC Whois 1.0 - MetaCharacter

source: https://www.securityfocus.com/bid/2000/info Whois scripts provide InterNIC lookup services via HTTP. The vulnerable scripts include versions of Matt's Whois and CGI City Whois. Older versions of these fail to filter metacharacters, allowing execution of arbitrary commands by embedding the...

FTP Server Detection

It is possible to obtain the banner of the remote FTP server by connecting to a remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10092; scriptversion"1.57"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/08/17";...

CVE-1999-0158

Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...

NCSA 1.3/1.4.x/1.5 / Apache HTTPd 0.8.11/0.8.14 - ScriptAlias Source Retrieval

source: https://www.securityfocus.com/bid/2300/info NSCA httpd prior to and including 1.5 and Apache Web Server prior to 1.0 contain a bug in the ScriptAlias function that allows remote users to view the source of CGI programs on the web server, if a ScriptAlias directory is defined under...

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval source: https://www.securityfocus.com/bid/2300/info NSCA httpd prior to and including 1.5 and Apache Web Server prior to 1.0 contain a bug in the ScriptAlias function that allows remote users to view the source of CGI...

CVE-2000-1206

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using modrewrite, or modvhostalias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files...

RPC portmapper Service Detection

The RPC portmapper is running on this port. The portmapper allows someone to get the port number of each RPC service running on the remote host by sending either multiple lookup requests or a DUMP request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10223;...

brain.ini

General Title=HTTP Miner Commands 1=GET /%%$RPT65,40,10%%.%%extention%% HTTP/1.0 ;2=GET /%%cgi-bin%%/%%passwordpath%%/%%passwordfile%%.%%extention%% HTTP/1.0 Variables cgi-bin=cgi-bin,cgi,bin,cgibin,data,dat,exec,apps,secure,hide, extention=htr,html,htx,asp,exe,xml,ini,txt,dat,dbf,lst,data,...

windows.passwd.cache.txt

Date: Wed, 21 Oct 1998 23:07:44 +0100 From: bt398 To: [email protected] Subject: 13 tiny bytes to show the huge sillyness of our great common friend.. Lately, I've been playing a bit with net.exe program \windows\net.exe. With this program, a user can set up the network drivers Windows For...