Citrix Nfuse 1.51 - Webroot Disclosure

Citrix Nfuse 1.51 - Webroot Disclosure source: https://www.securityfocus.com/bid/2956/info Citrix Nfuse is an application portal server meant to provide the functionality of any application on the server via a web browser. Nfuse works in conjunction with a previously-installed webserver. It has...

Icecast 1.1.x/1.3.x - Slash File Name Denial of Service

source: https://www.securityfocus.com/bid/2933/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not sufficiently sanitize user-supplied input, or sanely handle unexpected input. Upon receiving a request from a user for a file that end...

A-FTP Anonymous FTP Server Remote DoS attack Vulnerability

A-FTP Anonymous FTP Server Remote DoS attack Vulnerability Cartel Advisory Code: CART-0102 Vendor Affected: A-FTP Server - Eirik Helgeland [email protected] / [email protected] What It Is from the author: A free Unix Compatible Anonymous FTP server, running hidden from the user. Can be starte...

Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (PoC)

// source: https://www.securityfocus.com/bid/2880/info Windows Index Server ships with Windows NT 4.0 Option Pack; Windows Indexing Service ships with Windows 2000. An unchecked buffer resides in the 'idq.dll' ISAPI extension associated with each service. A maliciously crafted request could allow...

Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (3)

source: https://www.securityfocus.com/bid/2880/info Windows Index Server ships with Windows NT 4.0 Option Pack; Windows Indexing Service ships with Windows 2000. An unchecked buffer resides in the 'idq.dll' ISAPI extension associated with each service. A maliciously crafted request could allow...

Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (4)

source: https://www.securityfocus.com/bid/2880/info Windows Index Server ships with Windows NT 4.0 Option Pack; Windows Indexing Service ships with Windows 2000. An unchecked buffer resides in the 'idq.dll' ISAPI extension associated with each service. A maliciously crafted request could allow...

Microsoft SQL Server sa Account Default Blank Password

The remote instance of MS SQL / SQL Server has the default 'sa' account enabled without any password. An attacker may leverage this flaw to execute commands against the remote host, as well as read the content of any databases it might have. %NASLMINLEVEL 70300 this script attempts to log in to a...

CVE-2001-0374

The HTTP server in Compaq web-enabled management software for 1 Foundation Agents, 2 Survey, 3 Power Manager, 4 Availability Agents, 5 Intelligent Cluster Administrator, and 6 Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via th...

PT-2001-1477 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HPUX version 11 Description: The issue allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. This is due to a buffer overflow in the FTP serve...

webcgi98.txt

The following e-mail was sent to Acadsoft support about a week ago and I have yet recieved a response so I thought it was time to make it public. As I mentioned in the email I felt it was important because various universities use this as a registration utility. Hi, I was playing around with your...

3COM OfficeConnect DSL router vulneratibilities

Yesterday night I discovered a vulnerabilty. The router is a 3COM OfficeConnect 812 and the vulnerability is on the HTTP server, on port 80. When you enter with a browser on one of this router, you are asked for user/password, if you fail, you can see a web page telling you that is a protected...

OmniHTTPd Pro Denial of Service Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= OmniHTTPd Pro Denial of Service Vulnerability =- Release date: Tuesday, May 15, 2001 Introduction: OmniHTTPd Pro is a powerful all-purpose industry compliant web server built specifically for the Windows 9x and NT platforms. OmniHTTPd Pro c...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (3)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 3 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (4)

// source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (7)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 7 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (6)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 6 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Hexyn / Securax Advisory #17 - Bison FTP Server Directory Traversal

Hexyn / Securax Advisory 17 - Bison FTP Server Directory Traversal Topic: Bison FTP Server Directory Traversal Announced: 2001-02-17 Affects: Bison FTP Server version 4 Release 1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...

Security Bulletin MS01-025

---------------------------------------------------------------------- Title: Index Server Search Function Contains Unchecked Buffer Date: 10 May 2001 Software: Index Server 2.0, Indexing Service for Windows 2000 Impact: Run code of attacker's choice; file disclosure Bulletin: MS01-025 Microsoft...

CVE-1999-0922

An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file...

T. Hauck Jana Server 1.45/1.46/2.0 - MS-DOS Device Name Denial of Service

source: https://www.securityfocus.com/bid/2704/info Versions of Jana Server are vulnerable to a denial of service attack. It is possible to remotely crash a system running Jana Server by submitting a URL request which specifies an MS-DOS devicename. A hard reboot of the exploited server will be...