REMOTE EXPLOIT IN ALL CURRENT VERSIONS OF BIG BROTHER

/ Big Brother Exploit For ALL Versions prior to v.1.4h Desc: View the contents of any file on the remote system. Including /etc/passwd or /etc/shadow Contributions: Identified and Proof of Concept by Safety and Loki LoA Greets and shouts to: RootHat, Lammie The Infamous Lamagra! We know wuftpd wa...

Дырка в IRIX Workshop

Утилита cvconnect позволяет переписать любой файл в системе...

Уязвимость файловой системы в AIX

При некоторых условиях пользователь может записать файл, даже не имея на это разрешений...

hack-hm-1.1.txt

Title Hotmail Security Alert Hack HM1.1! 5/10/2000 By: Da Hawaiian HaXorS "Give back da aina!" Disclaimer In no event shall Da Hawaiian HaXorS be held liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an...

Stalker CommuniGate Pro 3.2.4 - Arbitrary File Read

Stalker CommuniGate Pro 3.2.4 - Arbitrary File Read source: https://www.securityfocus.com/bid/1493/info A vulnerability exists in the CommuniGate Pro product, from Stalker. It is possible to exploit this vulnerability to read arbitrary files on the filesystem. As CommuniGate Pro runs as root, any...

CVE-1999-0603

CVE-1999-0603 pertains to Windows NT where an inappropriate user is a member of privileged groups (e.g., Administrator, Domain Admins, Backup Operators, etc.). The root cause is improper assignment of users to high-privilege groups, enabling potential escalation of privileges. Documented groups i...

CVE-1999-0590

Technical details are not publicly available in the provided documents for CVE-1999-0590; no affected products, versions, impact, or remediation are specified. Monitor for updates from the connected sources.

CVE-1999-0238

CVE-1999-0238 affects the PHP/FI php.cgi CGI that allows an attacker to read arbitrary files on the system. The Red Hat, EUVD, and NVD entries consistently describe php.cgi as vulnerable to local file disclosure via traversal of the CGI, with the core issue being a path/file read capability in th...

CVE-1999-0595

A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded...

CVE-1999-0492

The CVE-1999-0492 entry relates to ffingerd version 1.19, where remote attackers can identify users on the target system based on its responses. The connected PT-1999-1171 page confirms the affected software and reiterates the issue, stating that there is no information about a fix in version 1.1...

CVE-1999-0127

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

CVE-1999-0990

The connected PT-1999-1510 entry identifies the vulnerability as affecting gdm (GNOME Display Manager) through error messages emitted when VerboseAuth is enabled. The root cause is verbose authentication error messages that allow an attacker to identify valid users on a system from local access. ...

CVE-1999-1300

Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration...

csm.dos.txt

Local / Remote D.o.S Attack in CSM Mail Server for Windows 95/NT v.2000.08.A USSR Advisory Code: USSR-99027 Release Date: December 29, 1999 3/5 Systems Affected: CSM Mail Server for Windows 95/NT and others old versions. Version: 2000-01A Version: 1999-07M Version: 1999-07I Version: 1999-07H...

ie5.file.txt

Microsoft Internet Explorer 4/5 overflows when the handling of "file://" specification. This overflow occurs when we are logging on to the Microsft Network, this overflow can be verified if the long name is specfied to the "file://". For example, file://test/AAAAAAAAAAAA.... long 'A' This is most...

Wingate_Registry_sploit.txt

Problem: All of the wingate server settings are stored in "HKEYLOCALMACHINE\Sofware\Qbik Software\Wingate" This makes it possible for anyone with registry editing permissions remote or physical to change wingate settings. Details: With about 10 minutes of exploration of the wingate settings i was...

nt-tcpip-dos.txt

Date: Fri, 25 Sep 1998 18:19:50 +0200 From: Gigi Mori Subject: Crashing NT with Native Calls Hi, Playing with TCPIP.SYS I've noticed that any user could crash the local system with a IRQLNOTLESSOREQUAL exception just calling the undocumented function NtDeviceIoControlFile with an handle to TCPIP...

xfree86.suse.txt

Date: Sun, 28 Mar 1999 23:20:58 +0200 From: Marc Heuse To: [email protected] Subject: SuSE Security Announcement - XFree86 -----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: xf86-3.3.3-5 Date: Sun Mar 28 12:26:39 CEST 1999 Affected: unix operating systems using xfree86 A...

oss-sound-tmp.txt

Date: Thu, 17 Dec 1998 02:12:38 +0200 From: Stefan Laudat Reply-To: Bugtraq List To: [email protected] Subject: OSS nice tmp race Hello all, While digging in the "soundon" script delivered with the OSS package the commercial one, of course, I have discovered something very unusual on line 26...

WinWebserver-exploit.txt

http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...