769 matches found
JetboxOne may allow unauthorized users to execute arbitrary code
Overview Lack of input validation in JetboxOne version 2.0.8 allows an user to upload arbitrary files to the vulnerable system. This could lead to the execution of arbitrary code. Description JetboxOne, an open-source content management system, could allow an attacker with "AUTHOR" privileges to...
MoinMoin: Group ACL bypass
Background MoinMoin is a Python clone of WikiWiki, based on PikiPiki. Description MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact If an administrative grou...
MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access
This web server is running MyServer See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, added VDB refs, changed family 4/20/009 include"compat.inc"; ifdescription scriptid11851; scriptversion "1.16"; scriptcveid"CVE-2004-2516"; scriptbugtraqid11189;...
Unauthorized Outpost Firewall stopping
Unprivileges user can stop firewall service by launching new network application and choosing "Exit and stop service"...
IBM AIX sendmail configured as open mail relay by default
Overview Sendmail shipped with IBM AIX is configured by default as an open mail relay. Unauthenticated, remote users can route mail through such a system. Description Sendmail is a widely used mail transfer agent MTA that is included with IBM AIX. According to IBM:The default configuration files...
cerberus.ftp.txt
Andrisk Security Advisory 2 - Cerberus FTP Server 1.05 Topic: Cerberus FTP Server 1.05 Announced: 2001-04-25 Affects: Cerberus FTP Server 1.05 OS : Win9x/NT I. Problem Description Cerberus FTP Server 1.05 is an FTP server for Windows 9x/NT. A bug allows view any files from remote computer. II...
Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 - FTP Server
Netscape Professional Services FTP Server LDAP Aware 1.3.6 - FTP Server source: https://www.securityfocus.com/bid/1411/info Certain versions of the LDAP-aware Netscape Professional Services FTP Server distributed with Enterprise Web Server have a serious vulnerability which may lead to a remote o...
