EXPLOIT    |   home BILGISAYARINIZLA DANS ETMEYI OGRENDINIZ AMA HALA PORSELEN MAGAZASINDA DANS EDEN BIR FIL ZARAFETINE SAHIPSINIZ.SIRADA HACK'I ZARIF BIR DANSA DONUSTURECEK OLAN EXPLOIT'LER KONUSU VAR.BILDIGINIZ GIBI,HACKLEMEYE CALISTIGINIZ SISTEMLER PEK COK PROGRAMDAN OLUSMUSLARDIR VE INSAN YAPISI OLAN HERSEY GIBI ACIKLARI VARDIR.BU ACIKLARI  (VEYA GUVENLIK DELIGI DIYEBILIRIZ) ORTAYA CIKARAN TOMARLA PROGRAM VARDIR.EXPLOITLER; REMOTE YANI UZAK VE YAKIN OLARAK IKIYE AYRILIR.REMOTE TIPLER,KENDI BILGISAYARINIZDA VEYA HOME SISTEMINIZDE CALISTIRILIRKEN,YAKIN TIPLER ICIN HACKLEMEYE CALISTIGINIZ SISTEMDE CALISTIRILMA GEREGI VARDIR.HACKLEMEYE CALISTIGINIZ PORTLARIN DAEMONLARI ICIN HERTURLU EXPLOIT'I ASAGIDA KONU BASLIGI OLARAK BULABILIR VE ENALTTAKI LINKE TIKLAYARAK SOURCE CODE'LARINI ALABILIRSINIZ.KES YAPISTIR TARZINDA KULLANIMLARI,SAYFALAR DOLUSU YAZMAKTAN DAHA IYIDIR.UNUTULMAMASI GEREKEN NOKTA SUDUR:HER EXPLOIT KESFEDILDIGIN DE,GUVENLIK DELIGINI BUNYESINDE BARINDIRAN SISTEMLERDE ONLEM ALMAKTA,HACKERLARIN UMIDINI BOSA CIKARMAKTADIR.BU DURUMDA EGER KENDI EXPLOIT'LERINIZI GELISTIREN BIR PROGRAMCI DEGILSENIZ,DAHA SICAGI SICAGINA KESFETMELI VE KULLANMALISINIZ.HACKERLIGI ,SUREKLI EGITIM VE GELISMELERI YAKINDAN TAKIP ETMESI GEREKEN BIR BILIM DALINA BENZETEBILIRSINIZ.ALTI AY ARA VERIP SONRA DONUS YAPARSANIZ ,PEKCOK SEYIN GERISINDE KALDIGINIZI ACIYLA FARKEDERSINIZ.SICAGI SICAGINA EXPLOITLERI TAKIP EDEBILMEK ICIN,VAMPIRINIZ CERT'I ONERIR.COMPUTER EMERGENCY RESPONSE TEAM ADININ BASHARFLERINI KULLANAN CERT,DUNYADA YENI BULUNAN EXPLOITLERI BIRINCI ELDEN SITESINDE DUYURUR.www.cert.com ADRESINDEN ULASABILIRSINIZ.PEKCOK HACK SITESINDE EXPLOITLER BOLUMU VARDIR AMA GENELLIKLE DEMODE OLMUSLARDIR. Oct / 2000 Exploits Mailing List & News remote security vulnerability exposed News Update's password protection can be bypassed NTop -w vulnerability as an example for finding ESPs 'Host' command vulnerable to buffer overflow Additional details about the IIS remote execution vulnerability JRun's vulnerabilities explained (command execution, file retrieval, WEB-INF) Avirt Mail vulnerable to a DoS (SMTP session) NTop -w remote buffer overflow (exploit code) HP-UX crontab temporary file symbolic link vulnerability Multiple vulnerabilities in Half-life Dedicated Server for Linux Xlock -d format string exploit code has been released Slrnpull exploit code has been released (SLRNPULL_ROOT) Dopewars vulnerability allows gaining of privileged access (popen, HOME) Linux /usr/games/zarch and /usr/games/splumber exploit code has been released Linux /usr/X11R6/bin/bitmap exploit code has been released (-stipple) Linux Oracle security vulnerability (ORACLE_HOME) Route (/sbin/route) exploit has been released (add parameter) Tin exploit code has been released (TERM variable) Linux Napster remote DoS exploit code has been released DoS in Intel Corporation InBusiness eMail Station Makewhatis exploit code released DoS attack against computers running Microsoft NetMeeting (Additional details) Vulnerability in Oracle Internet Directory Comprehensive exploit for PHP Format String vulnerability released Bytes Interactive's Web Shopper (shopper.cgi) Directory Traversal Vulnerability Shred does not really wipe the file eXtropia WebStore Directory Traversal vulnerability (file viewing) Mail File POST vulnerability Glibc and userhelper can be used to gain local root Godmessage 4 exploit code has been released Klogd exploit using Envcheck Multiple OpenBSD products vulnerable to string format attacks (fstat, photurisd, talkd, eeprom) Ncurses buffer overflows (exploit code) PINE exploit has been released (periodical check) OpenBSD vulnerable to an ARP-request DoS OpenBSD xlock exploit code has been released Local file exposure in Moreover.com's Cached_Feed.cgi /bin/su local libc exploit yielding a root shell BSD chpass exploit code released Webteacher's Webdata local files browsing vulnerability Sep / 2000 Exploits Exploit code released for the WebTV DoS Extent RBS directory Transversal Exploiting Eudora and the double click Office vulnerability (DLL) Immunix OS exploit code for the glibc 'format' string bug Harassing ICUII clients IBM WebSphere 'Host:' vulnerability Another Horde library $from bug SCO UnixWare 7 / Double Vision local root exploit Robotex Viking Server exploit code has been released Sambar Server search CGI vulnerability MultiHTML vulnerability allows local files retrieval Mobius DocumentDirect exploit code has been released DoS in FUR HTTP Server TYPSoft FTP Server remote DoS YaBB security vulnerability ($num) AnyPortal (php) allows access to local files NetMailshar Denial of Service Vulnerability WinSMTPD remote exploit and DoS (HELO) Unsafe passing of variables to mailform.pl in MailForm Windows 9x share service file handle vulnerability Exploit code for screen root compromise has been released (string bug) PhpPhotoAlbum file access vulnerability (explorer, getalbum) Tetrinet for Linux Denial of Service attack EFTP vulnerable to two DoS attacks WFTPD contains two security vulnerabilities (%C and upper characters) CPMdaemon password brute force attack Aug / 2000 Exploits More problems with Auction Weaver & CGI Script Center (fromfile) News Publisher CGI vulnerability (new authors) SunFTP vulnerable to two Denial-of-Service attacks (long buffer, half-open) DoS vulnerability in vqServer (long URL) GoodTech's FTP Server vulnerable to a DoS (RNTO) Totalbill vulnerable to an exploitable buffer overflow SuidPerl exploit code and patch released Denial of Service problem with Pragma TelnetServer 2000 (DoS) Gopher+ contains an exploitable buffer overflow (halidate) Subscribe Me users can modify the administrative password without knowing it Account Manager CGI vulnerability (Admin password) Diablo 2 TCP/IP Sever DoS Exploitable buffer overflow in Darxite password authentication (DoS, Buffer overflow) Wais.pl parameter passing security problem (attack walkthrough) HtGrep CGI vulnerable to arbitrary file viewing Imail Web Service remote DoS attack (HOST) Netauth vulnerable to dotdotdot traversal (password file retrieval) Omron Worldview root compromise (Environment) An exploitable stack overflow in procps's top (HOME) Statistics Server exploitable buffer overflow (Large GET) Firewall-1 Session Agent security hole still exist (DoS and password recovery) A new advanced exploit code for the string formating vulnerability in StatD LSD releases numerous exploits for IRIX Kon2 vulnerable to a locally exploitable root compromise (CHARSET_REGISTRY) Serv-U FTP Server vulnerable to NULL byte attack (DoS) PHP Path Revealing Vulnerability Jul / 2000 Exploits Kaufman Mail Warrior's weak encryption has been cracked TelServ reveals usernames and passwords AnalogX Proxy DoS (USER, HELO, SOCK4) Winamp M3U playlist parser buffer overflow vulnerability Multiple vulnerabilities in WFTPD (STAT, REST, MLST) GAMSoft's TelSrv vulnerable to a DoS StatD string format parsing root exploit code Gatekeeper remote exploit code has been released Guild FTPd allows remote checking for files existence Input Validation FTPD vulnerabilities explained and summarized WFTPD vulnerable to a remotely exploitable DoS (RNTO) Remote DoS attack on WircSrv Irc Server Poll It CGI exposes local files Remote DoS problem found in LocalWEB HTTP Server Jun / 2000 Exploits IP options exploit code has been released LeafChat IRC client Denial of Service XFree86 libICE DoS Polish SMS Gateway vulnerable to remotely exploitable buffer overflow WuFTPD remote root exploit code has been released (MKD, CWD, SITE EXEC) Trivial DoS attack of LDAP services ('*' attack) NetWin's Dmailweb Denial of Service attack (pophost, username) iMesh vulnerable to remote code execution GPM Denial of Service attack MDaemon vulnerable to a remote DoS (UIDL) Buffer overflow problem in the Small HTTP Server Dragon Server vulnerable to several DoS attacks AnalogX SimpleServer vulnerable to remote DoS Snoop vulnerable to a remotely exploitable buffer overflow INNd remote news user/group exploit code released Exploit code has been released for the Remote Registry Access Authentication vulnerability SoftHead A-FTP vulnerable to DoS attack Splitvt exploit code has been released Dump exploit code has been released (-R) Mercur Mail server large buffer exploit code has been released WebBanner CGI allows executing of arbitrary commands Path revealing vulnerabilities in Ceilidh bulletin board MailStudio remote code execution exploit code MS Access 97's poor password encryption Sendmail local root exploit using the Linux Capabilities bug EServ's logging mechanism contains a heap overflow problem Majordomo exploit code released Buffer Overrun problem in ITHouse Mail Server DoS vulnerability in IMate WebMail Server Savant Webserver exposes CGI script source IPX 'storm' Denial of Service gdm exploit code has been released (xdmcp) Deerfield Communications MDaemon Mail Server DoS (long username) Netwin DSMTP server exploit code released /usr/bin/Mail exploit code for Slackware released Media Streaming Broadcast Distribution DoS exploit code released A new DoS attack against Real Server (template) Xterm Denial of Service attack May / 2000 Exploits cdrecord exploitable buffer overflow Kdesud root compromise Additional majordomo security vulnerabilities Jolt2 - a new Windows DoS attack Ezboard vulnerable to remotely exploitable DoS attack Gauntlet Firewall exploit code has been released MDBMS remote exploit code has been released Infosrch.cgi exploit code creates an "interactive" shell gdm remote hole can lead to root compromise Lotus Domino Server allows documents to be modified remotely Fdmount local exploit code has been released klogin remote exploit code has been released Remote Denial of Service against Axent NetProwler Intel Express router vulnerable to remote DoS Lotus ESMTP Service vulnerable to DoS ksu and krshd exploit code released New exploit code for AntiSniff "patched" version Xsolider exploitable buffer overflow BreezeCOM adapters use factory set passwords Mining BlackICE with RFPickAxe Banner Rotation 01's password exposure AntiSniff can be attacked to execute arbitrary code NiteServer FTPd DoS Proxy Plus insecure defaults Argosoft FTP Server contains several security vulnerabilities CProxy DoS code released Matt Kruse Calendar script allows remote code execution KSCD exploit code released Eudora Pro and Outlook vulnerable to long filename vulnerability Emurl's User ID generation mechanism cracked Root compromise bug in Bugzilla (unchecked system() call) PCAnywhere configuration files use weak passwords encryption WebWho CGI can compromise system security NetStructure 7180 backdoor vulnerability Cisco's "show" command shows too much Microsoft Office 2000 UA Control Scripting exploit code AOL Instant Messenger path disclosure Netopia DSL Router Vulnerability Internet Explorer Opens the Cookie Jar Solaris root exploit for /usr/lib/lp/bin/netpr FormMail discloses environment variables information NetBSD unaligned IP options DoS Remote DoS attack using the "Malformed Extension Data in URL" vulnerability Cayman 3220-H DSL Router vulnerable to a DoS (long username/password) DNewsweb exploit code released IIS Denial-of-Service vulnerability (MaxClientRequestBuffer) Remotely exploitable buffer overflow in Sniffit Timbuktu Pro exploit code released New Windows 95/98 Denial of Service discovered (NULL source name) CASSANDRA NNTPServer vulnerable to remote DoS Dmailweb buffer overflow vulnerability allows remote code execution Listserv web archives exploitable buffer overflow Source code to mstream, a DDoS tool, has been released Tcpdump found to be vulnerable to a DoS Gnomelib exploit code has been released Apr / 2000 Exploits Novell's remote administration service vulnerable to a buffer overflow (8008, DoS) Solaris lpset dlopen vulnerability Cisco router vulnerable to an HTTP based DoS IC Radius suffers from a buffer overflow vulnerability SuSE vulnerability allows impermissible file deletion by local users (MAX_DAYS_IN_TMP) CVS vulnerable to DoS HP printers vulnerable to remote DoS (spooler port) Piranha default password exploit code Solaris 7 x86 lpset exploit Solaris 7 x86 lp exploit Solaris x86 Xsun overflow Sendmail's mail.local vulnerability (unsafe fgets) ZoneAlarm Firewall can be easily scanned for open ports Windows 9x's explorer.exe contains a buffer overflow (long filenames) DoS attack against HP JetDirect Printers Panda Security found to contain multiple security vulnerabilities AdTran's MX2800 M13 found to be vulnerable to a DoS (Ping Flood) Remote vulnerability in LCDproc 0.4 (shell access) AVM's Ken! Proxy vulnerable to two security holes (DoS, dotdotdot traversing) QNX's crypt, encryption algorithm has been cracked More vulnerabilities in FP (CERN Image Map Dispatcher) Remote DoS attack in Real Networks' RealServer (412 magic) IMAPd vulnerable to a remotely exploitable buffer overflow StarOffice can be caused to crash by a simply embedding a URL Netscape JavaScript-in-cookies security hole IE is still vulnerable to Cross-frame security when Javascript is enabled TalentSoft Web+ input validation bug vulnerability TrendMicro's Interscan vulnerable to remotely exploitable DoS (HELO, 4075) DVWSSR.DLL found to contain a remotely exploitable buffer overflow htDig reveals web server configuration paths XFServer vulnerable to DoS attack (Xwrapper) Dvwssr.dll allows downloading of ASP source code ('Netscape engineers are weenies') CRYPTOCard PalmToken PIN Extraction code released Eicon's ISDN Modem is vulnerable to a Denial-of-Service attack BizDB Search Script exposes server to remote command execution Infonautics getdoc.cgi allows unauthorized access to local documents BeOS network process DoS SalesLogix Eviewer Web App vulnerable to remote DoS WebObjects application server DoS attack FCheck system() vulnerability New CGI vulnerabilities uncovered. Mar / 2000 Exploits MS Index Server vulnerability allows viewing of ASP source code Windows TCP/IP Print Request Server vulnerable to DoS Exploit code released for the objectserver security vulnerability vqSoft's vqServer stores passwords in plaintext Linux gpm setgid vulnerability GNQS vulnerable to local root compromise Local Denial of Service attack against Linux (/dev/log & socket) Netscape Messenger sends out sensitive information (LiveConnect) Several exploits for the wmcdplay vulnerability Netscape Enterprise Server and '?wp' tags OfficeScan exposes local networks to centralized DoS PIX DMZ Denial of Service (TCP Resets) Exploit code released for the userhelper security vulnerability Several security bugs in Netscape Navigator Cross Site Scripting exploit code released (Internet Explorer) Kreatecd vulnerable to local root compromise IMWheel allows gaining of local root privileges Abuse.man CGI security vulnerability allows remote command execution Mercur POP3 / IMAP server vulnerable to DoS Sojourn search engine vulnerable to directory traversal Mercur's WebView WebMail Client vulnerable to DoS attack Navigator interprets HTML in ftp directory listings IrcII-4.4 DCC Chat buffer overflow Extending the FTP "ALG" vulnerability to any FTP client Wmcdplay vulnerable to a local root compromise Atsadc vulnerable to local root compromise ICQ's web based Guestbook CGI can crash the ICQ client StarScheduler (StarOffice) remote security vulnerabilities Simple HTML code can crash Internet Explorer (steelblue) Pocsag allows remote access via a default password ClipArt Gallery exploit code released TrendMicro OfficeScan contains numerous security holes (remote files modification) AOL Instant Messenger DoS vulnerability Corel Linux 1.0 configuration error leads to root compromise InfoSrch.cgi vulnerable to remote command execution ht://Dig information exposure TrendMicro's InterScan can be remotely uninstalled Axis StorPoint CD authentication mechanism can be bypassed Feb / 2000 Exploits EZ Shopper 3.0 vulnerable to remote command execution man bug allows privileges elevation DoS in Trendmicro OfficeScan Corel xconf allows gaining of local root NetGear ISDN RT34x router vulnerable to several DoS attacks Wordpad vulnerability allows executing of arbitrary commands Remotely exploitable buffer overflow in InterAccess's TelnetD Exploit code released for Firewall-1 FTP PASV security vulnerability Novell BorderManager 3.5 vulnerable to remote DoS attack FireWall-1 stateful inspection vulnerability allows attacking of internal hosts UltimateBB security hole discovered Crashing IIS by creating a long filename in the \mailroot\pickup directory GrabRtrConf - an automated script that downloads router configuration files CGI.pm and the untrusted-URL problem MySQL password handling problem exploit code released Many name servers are vulnerable to traffic amplification and NS route discovery Zeus Web server allows remote attacker to view source code of CGIs Remote access vulnerability in MySQL server GroupWise Web Access servlet Denial of Service attack Bypassing AXIS 700 Network Scanner's authentication scheme Hacking wwwthreads via SQL (Exploit code included) SHGetPathFromIDList() causes Windows programs to crash (DoS) Webspeed security vulnerability (WSISA vulnerability) Majordomo vulnerable to local exploit (resend vulnerability) "The Finger Server" security flaw allows remote code execution Outlook Express 5 allows remote e-mailers to retrieve local email messages Tiny FTPd allows execution of arbitrary code Security concerns when developing a dynamically generated web site Sybergen SyGate security hole (TCP 7323) Jan / 2000 Exploits Checkpoint FireWall-1 Script Strip algorithm can be bypassed Breaking Cobalt's RaQ2 password CGI QPopper POP3 server remotely exploitable security vulnerability (LIST) BNC IRC Proxy Server buffer overflow BSD systems procfs vulnerability Vpopmail (qmail add-on) is vulnerable to remote root exploit (vpopmail, vchkpw) Exploit code for the ppptalk security vulnerability has been released Cobalt RaQ web server vulnerability (patch available) ZBServer Pro vulnerable to a remotely exploitable buffer overflow (GET) Nortel Contivity package CGI vulnerability Visual CASEL allows execution of unauthorized applications PowerScripts PlusMail password vulnerability (password change) Super Mail Transfer Package vulnerable to remote DoS Yet another Hotmail security hole - injecting JavaScript in IE using "@import url(javascript:...)" CuteFTP's password storage insecurity CuteFTP's password storage insecurity IMail IMonitor vulnerable to a remote DoS attack (CGI) SolutionScripts.com Home Free CGI package vulnerability (search CGI) Multiple DoS attack vulnerabilities in MDaemon Server QPopper vulnerable to a remotely exploitable buffer overflow (AUTH) Solaris sadmind remote buffer overflow vulnerability UnixWare's pis utility can be used to gain root Netscape FastTrack server remote exploit (long GET) IRIX sound player security vulnerability UnixWare rtpm exploit Dec / 1999 Exploits CSM Mail Server vulnerable to a DoS attack (long HELO) Internet Explorer's cross-frame vulnerability (NavigateAndFind) IMail's password encryption scheme Sendmail vulnerable to ETRN DoS attack Savant Web Server is vulnerable to remote DoS attack (GET NULL) IBM NetStation/UnixWare local root exploit (HTTP interface) RedHat's initscripts allows local users to execute arbitrary code as other users Remote buffer overflow in miniSQL (w3-msql) Rover POP3 Server is vulnerable to a DoS attack (long USER) Netscape Navigator/Communicator 4.5 buffer overflow Multiple vulnerabilities in glFtpD Quake servers can be used to 'Smurf up' attacks Solaris 2.7 dmispd local/remote vulnerabilities Wmmon under FreeBSD can be used to compromise kmem privileges RealMedia server vulnerable to remote DoS attack (ramgen) Lotus Domino HTTP contains three security vulnerabilities (CGI and Denial-of-Service) Linuxconf contains remotely exploitable buffer overflow UnixWare i2odialogd remote root exploit GroupWise Web Interface 'HELP' hole FTP conversions on misconfigured systems (specifically wu-ftpd) posses a security threat Remote DoS in DNS PRO for WinNT Norton Email Protection Remote Buffer Overflow War FTP Daemon security vulnerability (60 connections & USER) Infoseek's Ultraseek for Windows NT is vulnerable to a remote buffer overflow FreeBSD 3.3 xsoldier root exploit SSH 1.2.27 Exploit code has been released VDO Live Player 3.02 contains an exploitable buffer overflow (vdo://) Several FTP Servers are vulnerable to multiple PORT commands DoS GoodTech Telnet Server NT vulnerable to a remote DoS NT WinLogon VM contains plaintext password visible in admin mode UnixWare pkg* command exploits UnixWare pkg vulnerability UnixWare allows gaining of root with non-su/gid binaries HP Secure Web Console is not so secure after all Phorum 3.0.x multiple vulnerabilities Several FreeBSD-3.3 vulnerabilities have been found (seyon, xmindpath) Solaris 'chkperm' & 'arp' security vulnerabilities FreeBSD gated local exploit UnixWare 7 uidadmin vulnerable to an exploitable buffer overflow CommuniGate Pro vulnerable to a remote DoS attack UnixWare core dumps follow symlinks FTP Serv-U vulnerable to a remotely exploitable buffer overflow (SITE) UnixWare 7 gethostbyname() overflow Nov / 1999 Exploits BisonWare FTP Server 3.5 contains several vulnerabilities RealNetworks RealServer G2 username/password buffer overflow IrFan image viewer 3.07 vulnerable to a buffer overflow Oracle Database Server root exploit code has been released Local users can cause Linux kernel to panic (syslogd) MS SQL Server vulnerable to "Magic" packet attack Mail-Gear 1.0 web interface is vulnerable to Directory Traversal Solaris7 'kcms_configure' vulnerable to an exploitable buffer overflow (NETPATH) MDaemon Server is vulnerable to multi-connection security vulnerability Solaris7 dtmail/dtmailpr/mailtool exploitable buffer overflow UnixWare 7's su vulnerable to an exploitable buffer overflow UnixWare 7's xlock vulnerable to an exploitable buffer overflow Denial of Service Vulnerability in Cabletron's SmartSwitch Router (SSR) UnixWare 7's Xsco vulnerable to an exploitable buffer overflow Remote DoS attack in Vermillion FTP Daemon (VFTPD) An improved Wu-FTPD exploit code has been released (WUFTPD) HP JetDirect web server vulnerable to long URL attack Tektronix PhaserLink Webserver gives out the administrator password ZetaMail POP3/SMTP server vulnerable to a remote DoS attack E-MailClub 'FROM' remote buffer overflow W4 Server CGI remote buffer overflow DeleGate vulnerable to a remotely exploitable buffer overflow Remote DoS Attack against G6 FTP Server v2.0 (beta 4/5) WebBBS login & password Buffer Overflow Vulnerability NFS Server MAX_PATH exploit code has been released WU-FTP 2.4.x leaks user information FormHandler CGI template vulnerability FreeBSD 3.3 'seyon' utility vulnerability TransSoft's Broker Ftp Server vulnerable to a remote DoS attack Network Solutions encrypted 'NIC update' password can be easily recovered BIND NXT remote overflow exploit code has been released Remote DoS attack on QVT/Term Artisoft XtraMail vulnerable to DoS attacks FTGate Version 2.1 and Eserv 2.5 vulnerable to Directory Traversal KVIrc client vulnerable to local file browsing Interscan VirusWall NT 3.23/3.3 buffer overflow StackGuard security vulnerability fixed BIG/ip 'view_textfile' and 'default user' security vulnerabilities IPSwitch IMAIL POP3 vulnerable to a remotely exploitable buffer overflow (USER) BFTelnet Server ver 1.1 vulnerable to remote DoS Guestbook.pl and SSI don't mix Alibaba Web Server vulnerable once again to a remote buffer overflow Cisco Routers' NAT support exposes the router for DoS attacks WFTPd 'MKD' exploit code released Bash 1.x command substitution vulnerability Xitami web server vulnerable to remote DoS via the administrative port MacOS Programmer's Window Vulnerability Hylafax version 4.0.2 vulnerable to a local root exploit Alibaba Web Server vulnerable to remote command execution Sendmail 8.9.x vulnerable to SIGKILL alias file killing Palm HotSync Manager is vulnerable to Denial of Service attack Avirt Mail Server 3.x is vulnerable to a remote buffer overflow attack Multiple vulnerabilities in UNIX & Windows 9x/NT applications Amanda backup local root compromises Windows NT remote denial of service (RFPoison) Express FS 2.x FTP Server is vulnerable to a remote buffer overflow Oct / 1999 Exploits Axent Raptor Firewall 'IP Options' DoS code released Netscape Messaging Server vulnerable to "RCPT TO" DoS FreeBSD vfs_cache vulnerable to a Denial-of-Service attack IRCd vulnerable to oversize PTR record DoS Netscape 4.7 and earlier vulnerable to "Huge Key" DoS Linux cwdtools Vulnerabilities Squid Web Proxy Authentication Failure Vulnerability OmniHTTPD Buffer Overflow Vulnerability WebSphere's Key Database password protection have been cracked OpenLink 3.2 vulnerable to a remote buffer overflow Remote Denial-of-Service in Axent's Raptor Firewall 6.0 'xmonisdn' allows reading of any local files under RedHat 6.x Netscape 4.5 and above are vulnerable to 'Dynamic Font' DoS FTP Serv-U Ver2.5 exploit code have been released Xerox DocuColor 4 LP is vulnerable to a DoS Netscape browser is vulnerable to < and > character replacement Detailed exploit code has been released for the "IFRAME ExecCommand" vulnerability NashuaTec D445 suffers from a number of security holes EFNet IRCd allows shell access to the IRC server A bug in IRCd 2.10.x (qident) can be used for a Denial of Service attack SCO OpenServer 5.0.5 'cancel' buffer overflow SCO Openserver XBase exploit code SCO OpenServer 5.0.5 'userOsa' scripts allow overwriting of the shadow file Novell Client 3.0 vulnerable to Denial of Service attack Hybrid Network's Cable Modems Security vulnerability Remote buffer overflow in ftpd on AIX 4.3.x SCO UnixWare 7.1 /usr/lib/merge/dos7utils local root exploit Yahoo! Messenger remote Denial of Service iHTML Merchant security vulnerabilities RedHat 6.0 RPMMail security vulnerability Patch Available for the Undocumented CFML Tags vulnerability Solaris 2.7 /usr/bin/mail exploit code released TeamTrack web server vulnerability Sambar Web Server 4.2.1 vulnerable to a Denial of Service attack Linux cdda2cdr local exploit Buffer Overflow problems in ActiveX controls Sep / 1999 Exploits Arkiea Backup HOME Environment Variable Vulnerability SuSE sscw Environment Variable Buffer Overflow Vulnerability SCO 5.0.x Xt lib exploit code is available CFingerD GECOS Buffer overflow vulnerability Exploit code and Patch released for 'dtaction' vulnerability on Digital UNIX Exploit code for the SCOterm vulnerability has been released Exploit code for the patched 'SCOterm' has been released Exploit code for the 'xlock' vulnerability has been released Exploit code for the 'XSco' vulnerability has been released Exploit code for the 'xterm' vulnerability has been released Patch released for the new ProFTPd 1.2.0pre6 vulnerability SSH 1.2.27 vulnerable to a Denial of Service attack WWWBoard passwords vulnerability SuSE 6.2 '/usr/bin/sccw' allows reading of any local file Vulnerability in Internet Explore 4/5 causes browser to crash Sega's Dreamcast Web Browser Email Security Issue Another shared memory exploit script has been released (ShareDream) Exploit code for the AMD vulnerability has been released Exploit code released for the 'deliver' SCO Server vulnerability Exploit code released for the 'SCOlock' SCO Server vulnerability SCO 5.0.5 lpr local root exploit code released New ProFTPd exploit code released (for version 1.2.0pre1,2,3) SunOS 4.1.1, 4.1.3 and 4.1.4 tmpfs Denial-of-Service Two new vulnerabilities in TenFour TFS SMTP 3.2 An exploitable Heap Overflow in Windows 95/98 Telnet.exe Netscape releases Netscape Enterprise Server 3.6sp2 patch IDs can be easily spoofed in Bluestone Sapphire/Web Sun releases patches for LC_MESSAGES vulnerability Windows 2000 COM handler allows attackers to start the Telnet service remotely SCO 5.0.5 doctor program allows local users to read /etc/shadow Mars Netware Emulator contains buffer overflows Two new exploit scripts released for Vixie CronD vulnerability Netscape Communicator EMBED tag vulnerability TFS Gateway 4.0 vulnerable to a Denial of Service attack Aug / 1999 Exploits Lotus Notes Domino Server 4.6 vulnerable to Denial of Service Attack Patch released for Sun's 'rpc.cmsd' buffer overflow vulnerability Lotus Notes vulnerable to a Denial of Service attack IE 5.0 HTML Applications exploit code released CiscoSecure Access Control Server allows unauthorized access WindowMaker buffer overflow vulnerabilities QMS-2060 network printer contains a security hole XServer logon encryption can be easily decrypted Dragon-Fire IDS Vulnerability New version of isdnutils fixes exploitable xmonisdn Vulnerability in W3-msql cgi script ALMail32 Buffer overflow vulnerability Exploit code for a bug in ircd2.10.x's qident has been released WebTrends ERServer is vulnerable to a Denial of Service attack 3Com's HiPer ARC vulnerable to a Denial of Service attack CheckPoint Firewall-1 is vulnerable to 'Port 0' Denial of Service attack Cfingerd 1.3.2 and earlier is vulnerable to a root exploit miniSQL w3-auth() buffer overflow Exploit code for the scosession vulnerability is available Vulnerabilities in BO2K encryption Plugins Netscape Communicator 4.6 vulnerable to 'mailto:' Denial of Service Netware 5 client can be hijacked Insecurity in Apache installation as shipped on Debian 2.1 and Boa Jul / 1999 Exploits mSQL multiple buffer overflows Java Hotspot Performance Engine vulnerable to attack InterMute privacy enhancer exposes information to other users WS FTP Pro's weak password encryption algorithm Very long filenames can crash NT (updated) AMaViS virus scanner for Linux can be used to gain root IRC Networks can be easily crashed Patrol's SNMP Agent 3.2 can lead to root compromise AIX 4.2.X & 4.3.X can easily halted Pine remote exploit source code released HPUnix CDE installation leaves current directory in root PATH VMware v1.0.1 exploit code released SDR vulnerable to attack How to break IoMega's Zip Drive read/write password protection DosEMU buffer overflow assists in gaining root 'Super' is susceptible to buffer overflow attack Another Cold Fusion Server vulnerability Netscape Communicator JavaScript crash Cognos PowerPlay Web Edition allows users to gain access to sensitive information Moyari - a new Windows 95/98 Denial of Service attack Patch Available for the "Unprotected IOCTLs" Vulnerability klock Screen Saver can be bypassed CFingerD 1.3.2 is vulnerable to a remote buffer overflow Exploit code for Xi Graphics Accelerated X Server Jun / 1999 Exploits Cabletron Spectrum root-shell vulnerability Xi Graphics Accelerated X Server 4.x, 5.x vulnerable to buffer overflows KDE K-Mail File Creation Vulnerability Cisco IOS Software keyword parsing vulnerability IIS Remote Exploit injection code released TCPDump is vulnerable to Denial of Service attack Vulnerability in 'statd' exposes vulnerability in automountd Netware web server Denial of Service How to hack, flood, spoof, nuke and sniff ICQ Denial of Service attack against Windows NT PDC RedHat 6.0 /dev/pts permissions bug can disrupt xterm sessions A new buffer overflows in smbvalid library Weaknesses in DNS label decoding can cause a Denial of Service whois_raw cgi security vulnerability A remote exploit code for the POP2 daemon vulnerability CGI can cause MacOS X system panic Broker FTP Server 3.0 is vulnerable to 'directory traveling' Solaris sdtcm_convert program allows root access Remote vulnerability in POP2 Daemon IRIX MIDIKeys allows guest users root access Netscape Communicator 4.6 JavaScript <TITLE> vulnerability May / 1999 Exploits Multiple Web Interface security holes Buffer overflow in SmartDesk WebSuite v2.1 Compaq Insight Manager exposes sensitive information Solaris LIBC exploit code Netfinity Remote Control software's security vulnerability Netscape Communicator's <TITLE> vulnerability WinAMP 2.x vulnerable to a buffer overflow INN server is vulnerable to a buffer overflow attack HP's Trusted Gateway Agent is vulnerable to a Denial of Service attack Novell NetWare TTS is vulnerable to a Denial of Service attack Netscape Navigator and Internet Explorer are vulnerable to Bookmark vulnerability Security problem with sockets in FreeBSD Solaris 'lpset' buffer overflow can compromise the system Solaris 'dtprintinfo' program contains a root exploit Multiple file system vulnerabilities in Oracle 8 Alibaba Web Server is vulnerable to path climbing FTP Serv-U daemon is vulnerable to a buffer overflow Patch Available for the "DHTML Edit" Vulnerability An improved wu-ftpd exploit code released Exceed X Server versions 5.0 and 6.0 are vulnerable to a Denial of Service attack 'Discus' discussion group server permission hole CSM Mail is vulnerable to Remote Buffer Overflow Apr / 1999 Exploits Bash 1.14.x vulnerable to 'exit code' parsing Cold Fusion Server vulnerability scanner FFingerD vulnerable to privacy hole IPFilter file lock hazard Cisco routers vulnerable to information leakage Internet Explorer 5.0 '%01 security bug' found (new) NetBSD Kernel hangs in name lookup Another ICQ99 Web Sever security flaw Patrol 3.25 security weakness found Webcom's Guestbook CGI vulnerability Network Appliance NetCache 3.3.1 vulnerable to SNMP 'public' community Multiple WinGate Vulnerabilities Several X windows vulnerabilities allow users to change permission of system files Xylan OmniSwitch login can be easily bypassed SiteServer 3.0 DirectMail saves username and password in clear text ICQ99 Web Server vulnerable to Denial of Service WebRamp Denial of Service Attacks Mar / 1999 Exploits SuSE X11 directory permission overrun Wide spread infections of the 'Melissa' Macro Virus FTP Servers exploit NetBSD security vulnerability in umapfs Microsoft Exchange buffer overflow attack (patch available) Netscape Communicator's talkback enhancement vulnerability NetBSD 'noexec' mount flag is not properly handled by non-root mount AOL Server 2.2 password vulnerability Linux Blind TCP Spoofing demonstration code released WinFreeze, a Denial of Service attack against Windows Windows NT Screen Saver vulnerability (a patch is available) Windows NT Screen Saver vulnerability (a patch is available) War FTP Deamon 1.70 beta1 saves passwords in 'clear' text. XCMail remote vulnerability Netscape communicator found() vulnerability Gnuplot 3.5 can be compromised to gain root Oracle installation stores admin password in log file Vulnerabilities found in IMail Feb / 1999 Exploits AltaVista Firewall '97 is vulnerable to a DNS attack InterScan VirusWall can be bypassed (patch is available) A new Cuartango exploit Netscape Communicator Window Spoofing Macintosh version of Word '98 includes sensitive material in document files. BackOffice installation exposes passwords Another ICQ 98a bug IIS Remote FTP Denial of Service attack PadLock-IT 1.01 bad password saving scheme Multiple vulnerabilities in ControlIT IIS 4.0 vulnerable to ExAir sample site Denial of Service Vulnerabilities found in Swish search engine IIS and Perl may be used to reveal true directory location MiRC DCC Security hole WS_FTP Server Remote Denial of Service attack RPCBind security vulnerability OShare, a new Windows Denial of Service attack Jan / 1999 Exploits Linux 2.0.35/36 vulnerable to local port Denial of Service attack Quake II Server buffer overflow FoolProof found to be full of security glitches. Windows 95/98 FrontPage extension security vulnerability Forms 2.0 (Fm20*.dll) ActiveX Control Security Fix IIS 4.0 is vulnerable when upgraded from earlier versions HTTP REQUEST_METHOD security flaw Solaris 2.5.1 and 2.6 vulnerable to ff.core exploit Sendmail 8.9/8.8 vulnerable to two new attacks CGIc Library is vulnerable to a buffer overflow attack DPEC's Online Courseware vulnerable to attack Iomega's poor Jazz drive backup encryption Solaris 2.7 allows finger bouncing Linux's urandom Denial of Service Solaris AutoMountD vulnerable to a remote exploit ICQ 98a security flaw Yahoo Pager vulnerable to Denial of Service attack WFTPd vulnerable to a remotely exploitable buffer overflow SCO's CalServer vulnerable to a buffer overflow L0phtCrack 2.5 misplaces temporary password files Tripwire buffer overflow suGuard 1.0 assists in gaining root access Oracle Database Server vulnerable to a Denial of Service attack Dec / 1998 Exploits KCMS Configure tool vulnerable to buffer overflow The LP daemon is susceptible to Denial of Service attacks. IRIX tape device insecurity. Linux Pluggable Authentication Modules (PAM) insecurity. MSProxy 2.0 can be used to attack hosts on internal network Microsoft Explorer bug fixed. Cookie Monster vulnerability Solaris DTmail vulnerable to buffer overflow attack. IRIX's fcagent daemon is vulnerable to a Denial of Service attack. Microsoft's Network Monitor susceptible to Denial of Service attack. RealSystem G2 Server saves password in clear text. MacOS 8.5.1's Web Sharing Denial of Service attack. Bootp Daemon remote vulnerability. Exceed 6.0.1.0 saves usernames and passwords in the clear. Netscape browser bug allows reading of local files. EWS (Excite for Web Servers) 1.1 security compromises. AutoFSD was found to be vulnerable to a remote exploit. Platinum PCM 7.0 Denial of Service. MkCookie program fault allow root compromise. Nov / 1998 Exploits IPFW's logs can be made ineffective. IRIX's gr_osview race condition. Samba 1.9.18 security vulnerabilities. NetBSD's character device drivers enable direct access to memory and disks. AIX's infod may assist in gaining root remotely. Windows NT's SNMP service vulnerability. SunOS's rdist program may assist in gaining root. CA's Archserve Exchange DB Agent saves passwords in the clear. NFTP's string handling vulnerability. WinGate Denial of Service Multiple KDE security vulnerabilities. RPC's portmapper pmap_(un)set insecurities. XFree86 3.3.2' setup tool race condition. BootP 2.4.3 daemon was found to be vulnerable to a race condition. mSQL Denial of Service. ICQ 98 beta sends out sensitive information. Internet Explorer 4.x's Custom settings don't work. CatDOC 0.90 buffer overflows. Internet Explorer 4.x "width= height=" bug. KLogd may assist malicious users in gaining root. Cisco 7xxx routers IP Datagrams mishaps. Internet Explorer's DirectDraw support can cause a complete crash. APC SmartUPS 2200 vulnerable to DoS. Netscape Communicator preference file found to be wide open. Netscape browser saves forms and emails in the clear. CDE's dtappgather assists in gaining root. Solstice Enterprise Agent SNMP vulnerability. A possible buffer overflow in xlock. RedHat 5.2's XWindows vulnerable to Cookie Hijacking. A GNU Text Utility (head) could cause Slackware to panic. Oct / 1998 Exploits Solaris License Manager's lock files exploits. USR Netserver 8/16 vulnerable to nestea attacks. Lynx 2.8.x (including the latest development version) overflow. Sendmail (till the latest version) Denial of Service. FreeBSD 3.0-Release vulnerable to nestea v2. Netscape Communicator 4.07 Javascript mishaps. HP Unix doesn't log failed 'su' commands. Netscape Communicator 4.5P2 (UNIX) doesn't disable JavaScript. Internet Explorer 4.0 Security Zone compromise. OSPF monitor may assist in gaining root. Netscape MIME Type buffer overflow. Mutt Mail user agent vulnerability. Midnight Commander 4.5.xx file overrun. Another Cuartango Security Hole (an Internet Explorer hole). Novell Netware 4.11 and 5.0 vulnerable to echo/chargen attack. Solaris /dev/rmt/* permission problem. RouteD "file create" exploit. Netscape 4.x vulnerable to "internal/parser". FreeBSD 2.2.x (before 2.2.8R) can be attacked by a RST Denial of Service. Cuartango Security Hole (an Internet Explorer hole). AOL 4.0 Email crash. A Digital Unix 4.0D bug in cdfs found (xcd related). www.securiteam.com/exploits/archieve.html TIKLAYIN