sperl 5.00503 (and newer ;) exploit

Not much to say except I feel little bit stupid posting it ... This exploit gives instant root, at least on RedHat 6.x/7.0 Linux boxes I have available for tests... And for sure, all other systems are vulnerable as well - it's just maybe this code will need some refining / tuning / minor changes...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

Серьезная локальная DoS-атака против *BSD

Недокументированный системный вызов, используемый в ipcs, неиспользующий проверку ACL позволяет любому пользователю заблокировать выход приложений...

Cisco Bug

Hello, I found what I think is an undocumented bug of at least the cisco 760 series, I tried to report it to cisco but they are always busy and english is one of my weak points. The bug: When you open about 98 connections to the port 23 of a Cisco 760 router it does a self reboot disconnecting it...

NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

Дырка в NetStructure

Имеется недокументированный пароль администрирования для 7110 локальный, для 7180 удаленный составленный из MAC-адреса сетевого адаптера...

NetStructure 7110 console backdoor

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7110 console backdoor Release Date: May 8th, 2000 Application: Intel NetStructure 7110 previously the Ipivot Commerce Accelerator 1000 Severity: Box can be compromised through configuration...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

Intel Corporation NetStructure 7110 - Undocumented Password

Intel Corporation NetStructure 7110 - Undocumented Password source: https://www.securityfocus.com/bid/1182/info NetStructure formerly known as Ipivot Commerce Accelerator is a multi-site traffic director. This internet equipment is designed for businesses with multiple Web site locations, routing...

Черный ход в Cart32

Недокументированная URL http://charon/scripts/cart32.exe/cart32cвыдает список паролей клиентов...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)

/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

warftp.txt

Thanks for the props Jarle. The current release beta of War-ftpd v1.70b seems to have some serious problems with the parsing of macros. The current version doesn't even seem to document the macros available, but in the response files sysmsg?.txt you are supposed to be able to put macros in the fo...

CVE-1999-1508

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as nclitems.html and nclsubjects.html...