325 matches found
Working Resources 1.7.x2.15 BadBlue - ext.dll Command Execution
Working Resources 1.7.x2.15 BadBlue - ext.dll Command Execution source: https://www.securityfocus.com/bid/7387/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access. This is due to an input validation issue in the 'ext.dll' component that could all...
man-cgi.txt
Upon researching several possible cgi based man holes I ran across the following bugged code © 1994-1999 Man-cgi 2.00, Panagiotis Christias © 1995 Man-cgi 1.15 Modified for Solaris 2.3, David Adams, © 1994 Man-cgi 1.15, Panagiotis Christias © 1996 Man-cgi 1.15 Ported to linux and maintained by, T...
Security Bulletin #00201
Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00201 Date: February 21, 2001 Cross-Ref: Title: Java Runtime Environment unauthorized command execution The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to...
pop2d.fold.txt
While working to port ipop2d exploit to java discovered another hole in the FOLD command of ipop2d... The ability to read files that are readable via the pop2d userid. Attached is a ported exploit in java for bnc... as well as the pop2d exploit transcript. -d0tslash b10z EFnet 9x EFnet...
PT-1998-1062 · Cisco · Cisco
Name of the Vulnerable Software and Affected Versions: Cisco systems affected versions not specified Description: The issue allows attackers to execute commands without authorization on Cisco systems using AAA authentication. Recommendations: At the moment, there is no information about a newer...