4655 matches found
Vulnerabilities in RaidenFTPD Server
----- Begin Hush Signed Message from [email protected] ----- Vulnerabilities in RaidenFTPD Server Overview RaidenFTPD v2.1 is an ftp server available from http://playstation2.idv.tw/raidenftpd. Vulnerabilities exist which allow users to break out of the ftp root. Details The following is an...
Resin Traversal Arbitrary File Access
It is possible to read arbitrary files on the remote server by prepending /../../ to the file name. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10656; scriptversion"1.26"; scriptcvsdate"Date: 2018/07/27 18:38:15"; scriptcveid"CVE-2001-0304"; scriptbugtraqid2384;...
PHP-Nuke opendir.php Traversal Arbitrary File Read
The remote host has the CGI 'opendir.php' installed. This CGI allows anyone to read arbitrary files with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10655; scriptversion"1.26"...
Savant Web Server Multiple Percent Request Remote DoS
It is possible to cause the Savant web server on the remote host to lock by sending a specially crafted GET request for a URL composed of percent characters. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10633; scriptversion "1.22"; scriptbugtraqid2468;...
Security Update: security problems in webmin CSSA-2001-004.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: security problems in webmin Advisory number: CSSA-2001-004.0 Issue date: 2001 January, 17 Cross reference: 1. Problem Description On several occasions, webmin creates temporary files insecurely. This ca...
Samba Web Administration Tool (SWAT) Error Message Username Enumeration
The remote SWAT server replies with different error codes when it is issued a bad user name or a bad password. An attacker may use this flaw to obtain the list of user names of the remote host by a brute-force attack. As SWAT does not log login attempts, an attacker may use this flaw even more...
Sendmail mime7to8() Function Remote Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a MIME buffer overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10588; scriptversion"1.18";...
oops WWW Proxy Server Reverse DNS Response Overflow
The remote server appears to be running ooops WWW proxy server version 1.4.6 or older. Such versions are reportedly affected by a buffer overflow vulnerability. A remote attacker might exploit this vulnerability to crash the server or execute arbitrary commands on the remote system. C Tenable...
MailMan Webmail mmstdod.cgi Arbitrary Command Execution
The version of MailMan Webmail on the remote web server has an arbitrary command execution vulnerability. Input to the 'ALTERNATETEMPLATES' parameter of mmstdod.cgi is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C...
OpenSSH Security Advisory (adv.fwd)
Hostile servers can force OpenSSH clients to do agent or X11 forwarding 1. Systems affected: All versions of OpenSSH prior to 2.3.0 are affected. 2. Description: If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup...
ISC BIND < 8.2.2-P7 Compressed ZXFR Name Service Query DoS
The remote BIND server, according to its version number, is vulnerable to the 'ZXFR bug' that could allow an attacker to crash this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10549; scriptversion"1.22"; scriptcvsdate"Date: 2018/06/27 18:42:25";...
[SECURITY] New version of curl fixes buffer overflow (update)
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 14, 2000 - ------------------------------------------------------------------------...
Cisco PIX Firewall Mailguard Feature SMTP Content Filter Bypass
The remote SMTP server seems to be protected by a content filtering firewall probably Cisco's PIX. However, an attacker may bypass this content filtering by issuing a DATA command before a MAIL command, that allows him to directly communicate with the real SMTP daemon. C Tenable Network Security,...
EFTP Newline String Handling Remote DoS
The version of EFTP running on the remote host has a denial of service vulnerability. Sending data without a trailing carriage return causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10510; scriptversion"1.36";...
[SECURITY] New version of xchat released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman August 30, 2000 - ------------------------------------------------------------------------ Package : xchat Problem type : remote...
Security update for Gnome-Lokkit
A bug has been found in the Gnome lokkit firewall package that could leave a few ports exposed when the user answered no to making any services visible to the outside world. Gnome-Lokkit 0.41 fixes this problem. Users should upgrade and regenerate their firewall rules...
[SECURITY] New version of xlockmore/xlockmore-gl released
Package: xlockmore, xlockmore-gl Vulnerability type: local exploit Debian-specific: no There is a format string bug in all versions of xlockmore/xlockmore-gl. Debian 2.1 slink installs xlock setgid by default, and this exploit can be used to gain read access to the shadow file. We recommend...
Big Brother bb-hostsvc.sh 'HOSTSVC' Parameter Traversal Arbitrary File Access
The version of Big Brother running on the remote host is affected by a directory traversal vulnerability in the 'HOSTSVC' parameter of the 'bb-hostsvc.sh' CGI. A remote attacker can exploit this to read sensitive information from the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
[SECURITY] New verion of dhcp released
Package: dhcp-client-beta dhcp-client Vulnerability type: remote root exploit Debian-specific: no The versions of the ISC DHCP client in debian 2.1 slink and debian 2.2 potato are vulnerable to a root exploit. The OpenBSD team reports that the client inappropriately executes commands embedded in...
Apache for Windows Multiple Forward Slash Directory Listing
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. %NASLMINLEVEL 70300 This...