Denial of service in Brocade switches (was: Engenio/LSI Logic controllers denial of service/data corruption)

This is a modified advisory about the specific Brocade case. Product : all Brocade fiber channel switches running pre-3.2 code including Silkworm 3800, Silkworm 3200 and Silkworm 2800. Vuln. : Remotely exploitable denial of service Date : 09/05/2004 Author : Frank Denis [email protected], tested by...

Ethereal fails to properly handle malfored SNMP packets

Overview Ethereal contains a vulnerability in the way it processes Simple Network Management Protocol SNMP packets. Description The Simple Network Management Protocol SNMP protocol enables network and system administrators to remotely monitor and configure devices on the network devices such as...

Xedus Webserver Multiple XSS

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. C Tenable Network Security, Inc. include"compat.inc"; if description...

GLSA-200409-03 : Python 2.2: Buffer overflow in getaddrinfo()

The remote host is affected by the vulnerability described in GLSA-200409-03 Python 2.2: Buffer overflow in getaddrinfo If IPV6 is disabled in Python 2.2, getaddrinfo is not able to handle IPV6 DNS requests properly and a buffer overflow occurs. Impact : An attacker can execute arbitrary code as...

Titan FTP Server quote stat Command Traversal Arbitrary Directory Listing

According to its banner, the version of Titan FTP Server running on the remote host has a directory traversal vulnerability. A remote attacker could exploit this to view arbitrary files on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14659;...

ZoneAlarm Personal Firewall UDP Source Port 67 Bypass

This version of ZoneAlarm contains a flaw that may allow a remote attacker to bypass the ruleset. The issue is due to ZoneAlarm not monitoring and alerting UDP traffic with a source port of 67. This allows an attacker to bypass the firewall to reach protected hosts without setting off warnings on...

MailEnable HTTPMail Service Content-Length Header Overflow

The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to...

Xedus Web Server Traversal Arbitrary File Access

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to directory traversal. An attacker could send a specially crafted URL to view arbitrary files on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14645; scriptversion"1.23";...

MailEnable Professional HTTPMail GET Request Remote Overflow

The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which causes a heap-based buffer...

IlohaMail Attachment Arbitrary File Create/Overwrite

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions do not properly check the upload path for file attachments, which could allow an attacker to place a file on the target in a location writable by the web user if the file-based backend is in use...

IlohaMail Email Header XSS

The remote host is running at least one instance of IlohaMail version 0.8.12 or earlier. Such versions do not properly sanitize message headers, leaving users vulnerable to XSS attacks. For example, a remote attacker could inject JavaScript code that steals the user's session cookie and thereby...

IlohaMail index.php init_lang Parameter Arbitrary File Access

The target is running at least one instance of IlohaMail version 0.7.10 or earlier. Such versions contain a flaw in the processing of the language variable that allows an unauthenticated attacker to retrieve arbitrary files available to the web user. %NASLMINLEVEL 70300 This script was written by...

Titan FTP Server Multiple Command Remote Overflow

The remote is running Titan FTP Server. All versions up to and including 3.21 are reported vulnerable to a remote heap overflow in the CWD, STAT or LIST command processing. An attacker may deny service to legitimate users or execute arbitrary code on the remote host. C Tenable Network Security...

ignitionServer umode Command Global Operator Privilege Escalation

The remote host is running a version of the IgnitionServer IRC service which might be vulnerable to a flaw that lets a remote attacker gain elevated privileges on the system. A local IRC operator can supply an unofficial command to the server to obtain elevated privileges and become a global IRC...

PHP Code Snippet Library index.php Multiple Parameter XSS

The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...

CVS history.c File Existence Information Disclosure

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behavior can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. C Tenable Network...

CuteNews show_archives.php archive Parameter XSS

According to its banner, the version of CuteNews on the remote host is affected by a cross-site scripting XSS vulnerability due to a failure to sanitize input to the 'archive' parameter of the showarchives.php script. An unauthenticated, remote attacker can exploit this, via a specially crafted...

ISS BlackICE/PC Protection Unprivileged User Local DoS

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Based on the version number, the remote BlackICE install is vulnerable to a local attack due to incorrect file permissions. Nessus based the results of this test on the contents of the local BlackICE configuration file. C Tenable Netwo...

Moodle 'post.php' 'reply' Parameter XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross-site scripting attack due to the application not properly validating the 'reply' variable on submission to the 'post.php' script. This allows a user to create a specially crafted URL that would execute arbitrary...

PSCS VPOP3 messagelist.html msglistlen Parameter DoS

The remote host is running PSCS VPOP3. The remote server is vulnerable to an attack which renders the server useless. An attacker would be able to remotely shut down the server by sending a simple request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...