myServer version 0.7 is susceptible to a simple directory traversal attack.
5e346d4fd84051b1af43543997416ebc071e1b9ab8cae08865414f317085f778The TrackMania game server that listens on TCP port 2350 can be crashed when garbage data is sent resulting in a denial of service.
679bdbc58dd5a64c64906445a5ca1bcb61f1c3b41fd72b74a16e4ead64037f83Pablo FTP server version 1.77 allows for information disclosure by detecting whether or not a file exists outside of the FTP root directory, allow a remote attack to peruse the system at will.
30472f2da0279acae8a308c9b219bd017b1c9a745f39a30ef1595f0e3ec6872eMyServer 0.4.3 is susceptible to a directory traversal attack that allows access to files and directories outside of the web root.
68bb16515c9ee3c7c84f0f2841e61a967e5f41bddba16ef2109fdc524f55d956Digi-news and Digi-ads version 1.1 allow administrative access without a remote attacker having knowledge of the account password by keeping necessary credentials client-side in a cookie. Essentially, as long as an attacker has a valid administrative login name, they can use their own password to authenticate.
ba080e1ee2b24295baccbce99c973d0e451004caf92506c8f54b87dc62b1a0d2PT News v1.7.7 allows access to administrator functionality without authentication via news.inc which is included in the index.php file.
19a14860edc87b027dcbf04677ec6da894af40a35495ef42885e005193b55ad5The Pablo Software Solutions FTP server version 1.0 build 9 for Windows 98/NT/XP shows files and directories that reside outside the normal FTP root directory. Fix available here.
6df65debffed14ad12b5f0d01521b4a49980ff30538c271b7f1ec8895d429fa5The KF Web Server v1.0.2 shows file and directory content if %00 is appended to the URL. Patch available here.
57f627a9f7b88cd3cc183123645d6f6df32860f6e50530dad88c452563699256Ish_detect is a small utility which detects the use of the remote ICMP shell daemon.
ee6a607ba18f2c24c981ddcc0bd045ef01ed9c7fea812f8621771878d4bba839
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed