5680 matches found
CVE-2003-0176
CVE-2003-0176 affects the IRIX Name Service Daemon (nsd) running as an NIS master on SGI IRIX 6.5.x (through 6.5.20f and possibly earlier). The vulnerability allows remote attackers to cause a denial of service (crash) by sending UDP port scans to nsd. Public sources in connected documents confir...
CVE-2003-0176: Undefined Security Weakness
The Name Service Daemon nsd, when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via a UDP port scan...
WU-FTPD 2.6.2 - Remote Command Execution
WU-FTPD 2.6.2 - Remote Command Execution / wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by "you dong-hun"Xpl017Elz, . Update: v0.0.2 August 2, I added wu-ftpd-2.6.2, 2.6.0, 2.6.1 finally. v0.0.3 August 3, Brute-Force function addition. v0.0.4 August 4, Added FreeBSD, OpenBSD version...
wu-ftpd 2.6.2 Remote Root Exploit (advanced version)
No description provided by source. / wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by "you dong-hun"Xpl017Elz, [email protected]. Update: v0.0.2 August 2, I added wu-ftpd-2.6.2, 2.6.0, 2.6.1 finally. v0.0.3 August 3, Brute-Force function addition. v0.0.4 August 4, Added FreeBSD, OpenBSD...
WU-FTPD 2.6.2 - Remote Command Execution
/ wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by "you dong-hun"Xpl017Elz, . Update: v0.0.2 August 2, I added wu-ftpd-2.6.2, 2.6.0, 2.6.1 finally. v0.0.3 August 3, Brute-Force function addition. v0.0.4 August 4, Added FreeBSD, OpenBSD version wu-ftpd-2.6.x exploit. It will be applied we...
Postfix 1.1.x - Denial of Service (2)
Postfix 1.1.x - Denial of Service 2 source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that...
Postfix 1.1.x - Denial of Service (1)
// source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that this vulnerability can be...
Symantec ActiveX control vulnerable to buffer overflow
Overview There is a buffer overflow in a component of Symantec's web-based Security Check. Description Symantec describes Security Check as "a free web-based tool that enables users to test their computer's exposure to a wide range of on-line threats. As part of running the check, users may insta...
SRT2003-06-12-0853 - ike-scan local root format string issue
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
ike-scan format string bug
Format string bug during command line processing...
CVE-2003-0393: Undefined Security Weakness
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans...
Privatefirewall protection bypass
Any scan different from SYN-scan can bypass scanning protection...
CVE-2002-1484
DB4Web server vulnerability CVE-2002-1484: when configured to show verbose debug messages, the server can be abused as a proxy to initiate TCP connections to arbitrary hosts/ports, effectively enabling port-scanning-like behavior. The attack is triggered by requesting a URL that encodes the targe...
CVE-2002-1484: Server-Side Request Forgery (SSRF)
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems port scan via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error...
PT-2003-1220 · Unknown · Db4Web Server
Name of the Vulnerable Software and Affected Versions: DB4Web server affected versions not specified Description: The issue allows remote attackers to use the DB4Web server as a proxy and attempt TCP connections to other systems, effectively performing a port scan. This is achieved by requesting ...
Frisk F-Prot AntiVirus 3.12b - Command Line Scanner Buffer Overflow
source: https://www.securityfocus.com/bid/6969/info Frisk's F-Prot Antivirus for Linux and BSD is prone to a buffer overflow in file name parameters that are passed to the command line scanner. If a backup script is launched by a privileged user to scan the filesystem scans a file with an unusual...
Efficient Networks xDSL DoS (syn flood)
SYN-scan causes router to crash...
5861 IP Filtering issues
Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 Latest firmware Advisory date: 10/01/2003 Severity: Moderate Details When using the built in IP filtering to block incoming TCP SYN flags, a simple port scan to the WAN interface of the route...
CVE-2002-2285
eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection...