CVE-2008-0151

Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a Telnet request with long options...

Level-One WBR-3460A Grants Root Access

Advisory: Level-One WBR-3460A Grants Root Access Risk: High Vendor Status: Vendor has not released an updated version Release Date: 08/01/2008 Last Modified: 01/01/2008 Author: Anastasios Monachos anastasiosmatgmaildotcom I Affected Products: ==================== Level-One WBR-3460A latest firmwa...

levelone-root.txt

Advisory: Level-One WBR-3460A Grants Root Access Risk: High Vendor Status: Vendor has not released an updated version Release Date: 08/01/2008 Last Modified: 01/01/2008 Author: Anastasios Monachos anastasiosmatgmaildotcom I Affected Products: ==================== Level-One WBR-3460A latest firmwa...

Level One WBR-3460A wireless ADSL router unauthorized access

Username/password is not required for telnet configuration access...

SeattleLab SLNet RF Telnet服务器空指针引用拒绝服务漏洞

BUGTRAQ ID: 27134 SLNet RF是Windows平台下的Telnet服务器软件。 SLNet RF处理异常的流程存在问题，远程攻击者可能利用此漏洞导致服务器不可用。 如果出现了异常的话SLNet服务器会显示一个消息框，当管理员点击该消息框时服务器会终止（服务器以调试模式运行时会自动终止）。在这种情况下处理telnet选项期间所出现的异常就会导致空指针引用。 SeattleLab SLNet RF = 4.1.1.3758 SeattleLab ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Seattle Lab telnet Server DoS

NULL pointer dereference on telnet options parsing...

Foxit WAC Server <= 2.1.0.910 crash

Luigi Auriemma Application: Foxit Remote Access Server WAC Server http://www.foxitsoft.com/wac/serverintro.php Versions: = 2.1.0.910 Platforms: Windows Bug: crash Exploitation: remote Date: 04 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...

Exception message in Seattle Lab Telnet Server 4.1.1.3758

Luigi Auriemma Application: Seattle Lab Telnet Server http://www.seattlelab.com/products/slnetrf/default.asp Versions: = 4.1.1.3758 Platforms: Windows Bug: exception error message Exploitation: remote Date: 02 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Exception message in VanDyke VShell 3.0.3.569

Luigi Auriemma Application: Seattle Lab Telnet Server http://www.seattlelab.com/products/slnetrf/default.asp Versions: = 4.1.1.3758 Platforms: Windows Bug: exception error message Exploitation: remote Date: 02 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/27143/info Pragma TelnetServer is prone to a denial-of-service vulnerability because it fails to adequately handle certain telnet options. Attackers can leverage this issue to terminate the server and cause denial-of-service conditions. This issue affects...

OS Identification : Telnet

Nessus was able to identify the remote operating system based on the telnet banner. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid29831; scriptversion"1.103"; scriptsetattributeattribute:"pluginmodificationdate",...

CCProxy Telnet Proxy Ping remote stack overflow analysis-vulnerability warning-the black bar safety net

By: mad Dog-B. C. T Simple to understand a bit of the vulnerability reason, the problem lies in the ping, the first to trigger this vulnerability see the effect. Turn on the CC, and then telnet 127.0.0.1 2 3, appeared the following tips CCProxy TelnetCCProxy Telnet Service Ready. CCProxy Telnet...

Sun SPARC XSCF Control Package (XCP)固件未明拒绝服务漏洞

Sun SPARC XSCF是一款扩展系统控制设备。 Sun SPARC XSCF固件的telnet1, Secure Shell SSH, 和httpd存在安全问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun XCP 1040 补丁下载： Sun XCP 1040 Sun OPL-M4-5-8-9000-XCP-1050-SP-G-F http://javashoplm.sun.com/ECom/docs/Welcome.jsp?StoreId=8&PartDetailId...

Debian DSA-1412-1 : ruby1.9 - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

Debian DSA-1410-1 : ruby1.8 - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1411-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

DSA-1412-1 ruby1.9 - possible man-in-the-middle attacks

Bulletin has no description...

DSA-1411-1 libopenssl-ruby - possible man-in-the-middle attacks

Bulletin has no description...

How to hack PCAnyWhere password-vulnerability warning-the black bar safety net

Since NT machines generally use PCAnyWhere for remote administration,Win2K machines generally use a terminal for remote management,so if we can get the PCAnyWhere remote connection account and password,then you can remote connection to the host. The key is to get to the PCAnyWhere password file...

Fedora 8 : ruby-1.8.6.111-1.fc8 (2007-2812)

This release contains another fixes of CVE-2007-5162 for Net::FTPTLS, Net::Telnet and Net::IMAP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...