Apache 1.3.x < 2.0.48 mod_userdir - Remote Users Disclosure

/ m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default configuration of moduserdir default apache module. Then attemp...

TCP/IP Multicast Address Handling Remote DoS (spank.c)

Nessus has detected that the remote host responds to TCP packets that are coming from a multicast IP address. An attacker can exploit this to conduct a 'spank' denial of service attack, resulting in the host being shut down or network traffic reaching saturation. Also, this vulnerability can be...

NetInfo Daemon Detection

A 'NetInfo' daemon is running on this port. NetInfo is in charge of maintaining databases or 'maps' regarding the system. Such databases include the list of users, the password file, and more. If the remote host is not a NetInfo server, this service should not be reachable directly from the...

DCE 1.2.2c Denial of Service Vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : DCE 1.2.2c Denial of Service Vulnerability Number : 20030902-01-P Date : September, 26 2003 Reference : CVE CAN-2003-0746 Reference : SGI BUG 897593 Fixed in : Patches 5313/5314 for DCE 1.2.2c SGI provides this information freely to...

Exclude top-level domain wildcard hosts

This host has an IP address known to be a wildcard record for a top- level domain TLD or for a host within the 'nessus.org' domain. It has been blacklisted and will not be scanned. C Tenable Network Security, Inc. Known top level domain wildcards, from http://www.imperialviolet.org/dnsfix.html .C...

MS Windows (RPC DCOM) Scanner (MS03-039)

No description provided by source. / dcom2scanner.c scan for second dcom vulnerability MS03-039 by Doke Scott, doke at udel.edu, 10 Sep 2003 based on work by: buildtheb0x presents : dcom/rpc scanner --------------------------------------- by: kid and farp and on packet sniffs of MS's dcom2 scanne...

[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...

Microsoft Windows RPCSS Service contains heap overflow in DCOM activation routines

Overview There is a remote buffer overflow in many versions of Microsoft Windows that allows attackers to execute arbitrary code with system privileges. Description The Microsoft RPCSS Service is responsible for managing Remote Procedure Call RPC messages and is enabled by default on many version...

CVE-2003-0472

The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service hang in inetd via port scanning...

[Advisory] IISShield V1.0.2

Moderator please disregard last message. There were some problems with the webmailers. : Original message follows: Hi all, A problem related to the denial of an Http Request in a specific byte check was encountered. The issue fixed is related to a very special situation which does not interfere...

Postfix 1.1.x - Denial of Service (2)

source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that this vulnerability can be exploited...

[SECURITY] [DSA-363-1] New postfix packages fix remote denial of service, bounce scanning

-------------------------------------------------------------------------- Debian Security Advisory DSA 363-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 3rd, 2003 http://www.debian.org/security/faq -...

DSA-363 postfix - denial of service, bounce-scanning

Bulletin has no description...

RAV ActiveX Buffer overflow in ravupdt.dll file

RAV Online Scanning ActiveX Buffer Overflow in RAVUPDT.DLL ================================================= PROGRAM: RAV ONLINE SCANNING ACTIVEX HOMEPAGE: www.ravantivirus.com VULNERABLE VERSIONS: Online Version Only DESCRIPTION ================================================= RAV Online Scanni...

[Full-Disclosure] RAV Antivirus : Buffer Overflow in Online Scanning ActiveX

RAV Online Scanning ActiveX Buffer Overflow ================================================= PROGRAM: RAV ONLINE SCANNING ACTIVEX HOMEPAGE: www.ravantivirus.com VULNERABLE VERSIONS: Online Version Only DESCRIPTION ================================================= RAV Online Scanning is a free...

CVE-2003-0472

The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service hang in inetd via port scanning...

CVE-2003-0472

The CVE-2003-0472 entry concerns IRIX 6.5.19: enabling IPv6 causes a remote attacker to trigger a denial-of-service (hang) in inetd via port scanning. This is documented in the NVD/NIST record; no exploit code or specific vulnerable component/version beyond IRIX 6.5.19 IPv6 capability is provided...

Infinity CGI Exploit Scanner Multiple Vulnerabilities

The remote is running Infinity Exploit Scanner, a web-based CGI vulnerability scanner implemented in perl and stored under the name 'nph-exploitscanget.cgi'. There is a flaw in this CGI that lets an attacker execute arbitrary commands on this host. In addition to this, there is a flaw in this CGI...

Privatefirewall protection bypass

Any scan different from SYN-scan can bypass scanning protection...

why i love xs4all + mediaplayer thingie

Why i love xs4all rant you'll probably wanna skip this but i need to get this out of my system: a few weeks back i was unpleasantly suprised by the fact that my internet wasn't working the support desk employee after making me reset my modem a dozen times and tripple checking my settings finaly...