3348 matches found
F5 Device Default Support Password
This F5 Networks system still has the default password set for the support user account. This account normally provides read/write access to the web configuration utility. An attacker could take advantage of this to reconfigure your systems and possibly gain shell access to the system with...
Default password 'forgot' for account 'super' (SSH/Telnet)
The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17292";...
[SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 870-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 870-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] Multiple vulnerabilities in BFCommand & Control for Battlefield 1942 and Vietnam
Luigi Auriemma Application: BFCommand & Control Server Manager http://www.bfcommandcontrol.org Versions: BFCC = 1.22A BFVCC = 2.14B BFVCCDaemon is NOT vulnerable Platforms: Windows Bugs: A full anonymous login bypass B login bypass through NULL username C invulnerable clients and full privileges ...
FreeBSD : super (2496)
The following package needs to be updated: super %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScrip...
NetBSD kernel local vulnerabilities
Name: NetBSD kernel local vulnerabilities Date: Dec 18, 2004 Author: Evgeny Demidov Description: There exists multiple vulnerabilities in NetBSD binary compatibility code. They can be approximately divided into two parts: 1 signal number validation problems in xxxsyskill,xxxsyssigaction and simil...
Debian DSA-522-1 : super - format string vulnerability
Max Vozeler discovered a format string vulnerability in super, a program to allow specified users to execute commands with root privileges. This vulnerability could potentially be exploited by a local user to execute arbitrary code with root privileges. %NASLMINLEVEL 70300 C Tenable Network...
Debian DSA-139-1 : super - format string vulnerability
GOBBLES found an insecure use of format strings in the super package. The included program super is intended to provide access to certain system users for particular users and programs, similar to the program sudo. Exploiting this format string vulnerability a local user can gain unauthorized roo...
Super Guestbook superguestconfig Admin Password Disclosure
Binary data 1564.prm...
DEBIAN-CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...
CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...
Cisco Transaction Language 1 (TL1) interface fails to properly validate accounts with blank passwords
Overview There is a vulnerability in the Cisco Transaction Language 1 TL1 login interface that could allow a remote attacker to gain access to a Cisco ONS device. Description Transaction Language 1 TL1 is a widely used telecommunications management protocol. A default account, CISCO15, contains a...
SuSE-SA:2003:049: Linux Kernel
The remote host is missing the patch for the advisory SuSE-SA:2003:049 Linux Kernel. This security update fixes a serious vulnerability in the Linux kernel. A missing bounds check in the brk system call allowed processes to request memory beyond the maximum size allowed for tasks, causing kernel...
FreeBSD : SA-04:13.linux
The remote host is running a version of the FreeBSD kernel which contains a programming error in the way it handles some Linux system calls, which may be exploited by an attacker to gain super-user privileges on the remote host, or to crash it. C Tenable Network Security, Inc. if !...
CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...
CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...
CVE-2004-0579
The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...
Format string bug in super
Format string bug on syslog call...
[Full-Disclosure] [SECURITY] [DSA 522-1] New super packages fix format string vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 522-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...