vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

SHOUTcast Server DoS detector vulnerability

This detects SHOUTcast Server's version. If the version equals 1.8.2 it is vulnerable to a denial of service attack. OpenVAS Vulnerability Test $Id: shoutcastversion.nasl 5676 2017-03-22 16:29:37Z cfi $ Description: SHOUTcast Server DoS detector vulnerability Authors: Noam Rathaus Copyright:...

HTTP login page

This script logs onto a web server through a login page and stores the authentication / session cookie. OpenVAS Vulnerability Test $Id: httplogin.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: HTTP login page Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is fre...

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...

Veritas Backup Exec Agent 8.x9.x - Browser Overflow

Veritas Backup Exec Agent 8.x9.x - Browser Overflow / Got to give it to class101 on this one. Tested and penetrated. / str0ke / / VERITAS Backup Exec v9.1.4691.SP1 v9.1.4691.SP0 v8.5.3572 Agent Browser Service, Remote Stack Overflow Highly Critical All credits to:...

directory traversal bug in Pserv 3.0b2

Donato Ferrante Application: PSERV - the small web server http://sourceforge.net/projects/pserv Version: 3.0 beta 2 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

Vulnerability in WebCollection Plus (TM)

These vulnerabilities were found / tested on: WebCollection Plus TM Copyright 2001 Follett Software Company Version 5.00 Revision 12-01-A Dec 19 2001 Program protects from reading other non-webserver accessible files by checking for a : or excessive .'s in a string. If the URL has a / at the...

pam_unix_passwd.so.txt

Date: Wed, 23 Dec 1998 13:12:45 +0100 From: Michal Zalewski Reply-To: Bugtraq List To: [email protected] Subject: Linux PAM up to 0.64-2 local root compromise As someone said, "Never make any mistaeks." Latest release of Linux Pluggable Authentication Modules pam-0.64-2, as well as previous...