CVE-2010-2026: Improper Authentication

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to bypass authentication, and reset the modem or replace the firmware, via a direct request to an unspecified page...

WebSTAR FTP Server USER Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WebSTAR FTP...

Fedora Update for awstats FEDORA-2008-10962

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 8 Update: awstats-6.8-3.fc8

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

webstar-xssrfi.txt

Hi PacketStormSecurity! I'm reporting a vulnerability of type XSS and RFI in WebSTAR Mail. Thank you for all. +==========================================================================+ + WebSTAR Mail = 4.4.1 XSS & RFI Multiple Remote Vulnerabilities +...

CVE-2006-6131

Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...

CVE-2006-6131

CVE-2006-6131 describes an untrusted search path vulnerability in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier. The affected components are WSAdminServer and WSWebServer. Local users with webstar privileges can gain root privileges by placing a malicious libucache.dylib in the curren...

CVE-2006-6131

Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...

CVE-2006-6131: Undefined Security Weakness

Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...

Kerio WebStar本地权限提升漏洞

Kerio WebSTAR是运行在Mac OS X平台上的WEB服务器。 Kerio WebSTAR在不安全的权限安装程序文件，本地攻击者可能利用此提升自己的权限。 在安装Kerio WebSTAR时/Applications中继承了两个setuid二进制程序： kevin-finisterres-computer:/Desktop kf$ find /Applications/Kerio\ WebSTAR -perm -4000 -ls 978790 3016 -rwsrwx--x 1 root admin 1542556 Apr 10 2006 /Applications/Kerio...

Exploits Kerio WebStar libucache.dylib privilege escalation

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key;...

kerio_WebSTAR_pwn.pl.txt

!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...

[Full-disclosure] Kerio WebSTAR local privilege escalation

DMA2006-1115a - 'Kerio WebSTAR local privilege escalation' Author: Kevin Finisterre Vendors: http://www.kerio.com/webstarhome.html Product: 'Kerio WebSTAR = 5.4.2 ?' References: http://www.digitalmunition.com/DMA2006-1115a.txt Description: Kerio WebSTAR is an easy-to-use web server for Mac OS X...

Kerio Webstar privilege escalation

Suid application loads library from current directory...

Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key;...

Kerio WebSTAR 5.4.2 (OSX) - libucache.dylib Local Privilege Escalation

Kerio WebSTAR 5.4.2 OSX - libucache.dylib Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach...

Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)

Exploit for macOS platform in category local exploits ======================================================================== Kerio WebSTAR 5.4.2 libucache.dylib Privilege Escalation Exploit OSX ======================================================================== !/usr/bin/perl...

Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation

!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...

4D WebStar Tomcat Plugin Remote Buffer Overflow flaw

The remote server is running 4D WebStar Web Server. The remote server is vulnerable to a remote buffer overflow in its Tomcat plugin. A malicious user may be able to crash service or execute arbitrary code on the computer with the privileges of the HTTP server. OpenVAS Vulnerability Test $Id:...

4D WebStar Symbolic Link Vulnerability

The remote server is running 4D WebStar FTP Server. 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Successful...