2145 matches found
DoS против MDaemon (imap buffer overflow)
Переполнение буфера в команде Select пользователь должен быть авторизован...
[Full-Disclosure] Mdaemon 7.0.1 IMAP overflow.
Let it be known that this bug is after authentication "postauth" and therefore useless. In the current version of Mdaemon from ALTN there exists an easy to exploit, run-of-the-mill stack overflow. By authenticating and sending a large argument to the STATUS command in the IMAP component, a buffer...
DoS in NETFile FTP/Web Server
Donato Ferrante Application: Fastream NETFile FTP/Web Server http://www.fastream.com/ Version: 6.5.1.980 Bug: Denial Of Service Date: 19-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...
[waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2]
================================================================================ waraxe-2004-SA017 ================================================================================ User-level authentication bypass in phpnuke 6.x-7.2...
cPanel 5/6/7/8/9 - 'dir' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplie...
YaBB SE 1.5.x - Arbitrary File Deletion
YaBB SE 1.5.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/9774/info It has been reported that YaBB SE may be prone to multiple vulnerabilities due to improper input validation. The issues may allow an attacker to carry out SQL injection and directory traversal attacks...
Calife heap corrupt / potential local root exploit
Calife heap corrupt / potential local root exploit -------------------------------------------------- by Leon Juranic a.k.a DownBload [email protected] / II-Labs Version affectedtested: calife-2.8.4c and calife-2.8.5 - calife can be found at packages.debian.org, FreeBSD 5.0 security, ... From...
SandSurfer < 1.7.0 User Authentication Bypass
The remote host is running SandSurfer, a web-based time keeping application. A vulnerability has been disclosed in all versions of this software, up to version 1.6.5 included that could allow an attacker to access the application without authenticating. %NASLMINLEVEL 70300 C Tenable Network...
Multiple RED-M RedAlert bugs
Multiple bugs with user authentication...
BolinTech DreamFTP Server 1.0 - User Name Format String
BolinTech DreamFTP Server 1.0 - User Name Format String // source: https://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication...
iDEFENSE Security Advisory 02.04.04: GNU Radius Remote Denial of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 02.04.04 GNU Radius Remote Denial of Service Vulnerability http://www.idefense.com/application/poi/display?id=71 February 4, 2004 I. BACKGROUND Radius is a server for remote user authentication and accounting. More informati...
SQL injection в конференции ConfYmI
SQL injection в конференции ConfYmI Название скрипта: ConfYmI Уязвимая версия: все Сайт производителя: www.310k.ru Автор: Konstantin Andrunin Дата: 22/01/2004 Уязвимость найдена в скрипте 'index.php' . Вследствии плохой проверки переменных $login , $password , удалённый пользователь может внедрит...
Cyclonic Webmail 4 multiple vulnerabilities
Software: Cyclonic Webmail Version : 4 vendor : Stallion Networking 1. Software description ---------------------- Cyclonic is a webbased interface allowing users to handle emails stored on a POP Server. This software is Freeware 2. Vulnerability description ------------------------- - bypassing...
Buffer overflow in VMware GSX
Buffer overflow during user's authentication...
vbPortal 2.0 alpha 8.1 - (Authenticated) SQL Injection
source: https://www.securityfocus.com/bid/8613/info It has been reported that vbPortal is prone to SQL injection attacks when authentication users. The problem occurs due to insufficient sanitization of the $aid variable, used to store the name of the authenticating user. As a result, an attacker...
pam_smb buffer overflow
Buffer overflow on user authentication...
Low: Red Hat Security Advisory: openssh security update
Updated OpenSSH packages are now available. These updates close an information leak caused by sshd's interaction with the PAM system. OpenSSH is a suite of network connectivity tools that can be used to establish encrypted connections between systems on a network and can provide interactive login...
qpopper user existance information leak
During USER/PASS authentication behaviour for invalid username and password is different...
[Full-Disclosure] iDEFENSE Security Advisory 06.16.03: Linux-PAM getlogin() Spoofing Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 06.16.03: http://www.idefense.com/advisory/06.16.03.txt Linux-PAM getlogin Spoofing Vulnerability June 16, 2003 I. BACKGROUND The Pluggable Authentication Module PAM is a flexible mechanism for authenticating users. More...
iDEFENSE Security Advisory 2003-06-16.t
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 06.16.03: http://www.idefense.com/advisory/06.16.03.txt Linux-PAM getlogin Spoofing Vulnerability June 16, 2003 I. BACKGROUND The Pluggable Authentication Module PAM is a flexible mechanism for authenticating users. More...