E-Zone Media FuzeTalk 2.0 - AddUser.cfm Administrator Command Execution

E-Zone Media FuzeTalk 2.0 - AddUser.cfm Administrator Command Execution source: https://www.securityfocus.com/bid/10276/info It has been reported that FuseTalk is affected by an administrator command execution vulnerability in the adduser.cfm script. This issue is due to a failure of the...

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access

Sun AnswerBook2 1.x - Unauthorized Administrative Script Access source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface...

sadmind-howto.txt

rpc.sadmind 27/02/2000 ------------------------ The bug rpc.sadmind has been reported a long time ago. But there has never been a manual for it. So i decided to explain how to exploit the bug. First of all i would recommend to use the sadmind brute forcer for the sploit files sadmindex-sparc.c an...

Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access

source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...

Дырка в Blackboard Courseinfo

Непроверяемый ввод пользователя позволяет поменять пароль любого пользователя или создать нового...

shadow.root.uid.65536.txt

Date: Mon, 24 May 1999 20:44:28 +0200 From: Lord Evil To: [email protected] Subject: UID 65536 and shadow-19990307 Recently one of our admins installed the shadow-19990307 package. While playing around I noticed that if a new user is created with UID 65536, he will become root upon login. No...