Windows XP Service Manager race conditions

On some race conditions confidential information may appear in the files open by system services during system shutdown...

CVE-2005-1516

The CVE-2005-1516 issue affects NetWin DMail 3.1a’s DList component. The vulnerability enables a remote attacker to bypass authentication, read log files, and shut down the system by sending a log request (sendlog) with an incorrect password hash, which is not properly handled by the internal _cm...

CVE-2005-1516

DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...

CVE-2005-1516

DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...

CVE-2005-1422

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service server or camera shutdown via a direct request to admin.html...

CVE-2005-1422

CVE-2005-1422 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability allows remote attackers to perform administrator operations and trigger a denial of service by sending a direct request to admin.html . The connected documents confirm the affected product and impact but do not p...

CVE-2005-0904

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe...

CVE-2005-1182: Undefined Security Weakness

Unknown vulnerability in Incoming Remote Command iSeries Access for Windows Remote Command service in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service IRC shutdown via certain inputs...

CVE-2004-0090

Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors...

CVE-2004-0090: Undefined Security Weakness

Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors...

rpc3telnet.txt

Vulnerability found by Flare@CiSO Greets to nolimit, COREiSO, news, and class101. Versions Tested: RPC-3 Telnet Host - Revision F 3.05, C 1998 This is a basic login-bypass vulnerability found in the RPC-3 Telnet Host v 3.05 made by "Bay Technical Associates". This telnet daemon is used by many...

CVE-2005-0904

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe...

CVE-2005-0904: Improper Input Validation

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe...

Non-administrators can shut down Windows XP SP1 thru TSShutdn.exe (889323)

The version of Microsoft Windows XP SP1 on the remote host is missing security update KB889323. A non-administrative user can remotely shut down the remote host by using the TSShutdn.exe command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17607;...

PlatinumFTP 1.0.18 remote DoS

Application: PlantinumFTP Site: http://www.roboshareware.com/indexplatinumftp.php Version: 1.0.18 and maybe lower OS: Windows Bug: Remote Denial of Service ===== Product: PlatinumFTPserver simplifies management of all your Ftp clients with regards to sending and receiving program and data files...

CVE-2004-1586

Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g rev 1.1.2, which could allow remote attackers to stay connected...

CVE-2004-1625: Undefined Security Weakness

pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown...

HP-UX Security patch : PHCO_21566

The remote host is missing HP-UX Security Patch number PHCO21566 . Sec. Vulnerability with shutdown command %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16549; scriptversion"1.7"...

HP-UX PHCO_21567 : HPSBUX0005-113 Sec. Vulnerability with shutdown command (rev.1)

s700800 11.04 VVOS patch for shutdown1M : shutdown1M improperly handles input variables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO21567. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHCO_21534 : HPSBUX0005-113 Sec. Vulnerability with shutdown command (rev.1)

s700800 11.00 patch for shutdown1M : shutdown1M improperly handles input variables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO21534. The text itself is copyright C Hewlett-Packard Development Company,...