[SECURITY] Fedora 10 Update: curl-7.19.4-1.fc10

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Default Password (toor) for 'root' Account

The account 'root' on the remote host has the password 'toor'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if...

Dogfood CRM spell.php Remote Command Execution

This module exploits a previously unpublished vulnerability in the Dogfood CRM mail function which is vulnerable to command injection in the spell check feature. Because of character restrictions, this exploit works best with the double-reverse telnet payload. This vulnerability was discovered by...

win32 telnetbind by winexec 111 bytes

No description provided by source. ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The Sh3llcode: ;...

win32 telnetbind by winexec 111 bytes

win32 telnetbind by winexec 111 bytes. Shellcode exploit for win32 platform ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The...

win32 telnetbind by winexec 111 bytes

Exploit for win32 platform in category shellcode ===================================== win32 telnetbind by winexec 111 bytes ===================================== ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services...

CVE-2009-0641

systerm.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client,...

FreeBSD Security Advisory (FreeBSD-SA-09:05.telnetd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:05.telnetd.asc ADV FreeBSD-SA-09:05.telnetd.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:05.telnetd.asc Authors: Thomas Reinke Copyright: Copyright c 200...

FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit

Exploit for freebsd platform in category local exploits ==================================================================== FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit ==================================================================== FreeBSD 7.0-RELEASE telnet daemon...

[Full-disclosure] FreeBSD zeroday

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

FreeBSD 7.0-RELEASE Telnet Daemon Local Privilege Escalation Exploit

No description provided by source. FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible...

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, wha...

FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

Default Password (password) for 'admin' Account

The account 'admin' on the remote host has the password 'password'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "password";...

CVE-2008-6096

Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...

CVE-2008-6096

Juniper ScreenOS prior to 5.4.0r10, 6.0.0r6, and 6.1.0r2 is vulnerable to cross-site scripting due to improper sanitization of user input on the web interface and telnet login pages. The issue allows an attacker to inject arbitrary script via the username field on login, potentially affecting use...

Default Password (password) for 'admin' Account on Broadcom BCM96338 ADSL Router

The remote host is a Broadcom BCM96338 ADSL router, and its 'admin' account uses the password 'password'. An attacker may leverage this issue to gain administrative access to the affected system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35621; scriptversion...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-5.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

CoolPlayer 2.19 - PlaylistSkin Local Buffer Overflow

CoolPlayer 2.19 - PlaylistSkin Local Buffer Overflow !/usr/bin/perl coolplayerbof.pl Jeremy Brown [email protected]/jbrownsec.blogspot.com CoolPlayer BUILD 219 'PlaylistSkin' Buffer Overflow Exploit http://coolplayer.sourceforge.net TCP 0.0.0.0:4444 0.0.0.0:0 LISTENING C:\Documents and...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-4.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...