XOR Crew :: Security Advisory - HostAdmin - Remote Command Execution Vulnerability. POC Included.
6219a1cce7396fca0cafffc2189eae721c467e8a9b1cdbcee1b4eaa027860189
Admin tools for the Rule Set Based Access Control (RSBAC) system. Includes log viewers, special patches, nss and pam related functionality, and more.
f1cd5fa854a23d707cd1968dbef85340dba8171509727e6a7cb2568efaccdf91
CERT Advisory CA-99-16 - Buffer Overflow in solaris sadmind. The sadmind program is installed by default in Solaris 2.5, 2.6, and 7.
91e3ccb53dada317e1d9eb7fb117db045ea4dab85eb4219206c1ebfaece31491
Super Solaris sadmin Exploit - works with solaris 2.6/7.0 SPARC and x86, does the sp guessing (much like sadmin-brute.c).
1bc5ba57da0d2994c387df4be7a70b3d1a5261e3f76ef1792396e253ad6d576c
htaccess.tar - Perl script for adding users to the .htaccess file. Includes information on how to set up password protected web pages.
0136a4de0bb885ebc034bbecae45c0ad21f7fb4a273400f80ed682673066e15e
Allaire Security Bulletin (ASB00-14) - Allaire has recently been notified by Foundstone, Inc. (see Revisions section below for contact information) of a denial of service attack against an unprotected installation of the ColdFusion Administrator. This issue only affects ColdFusion Servers that have not followed Allaire's recommendations in the Allaire Security Best Practices article 10954.
5f15d73015593185e82770c379eda7d3e8ca9790e0e0bf36811eca22b5c1d3c0
New Vulnerability found in Allmanage. This one gives access to the main admin panel where you can set a lot of options and variables. Websites using Allmanage Website Administration Software 2.6 with the upload ability contain an easily exploited vulnerability wich gives you full add/del/change access in the user-account directories and you can change the files in the main directory of the CGI script.
0e8435060a9e6771f7386b3732f06e361de8d7c64759e6a4602769a0519d780f
asb99-07.dos_cf_admin
df0b923c08ef8a44c4e138b2b22b38133673ae822512a9ab84fcd3c8236ff5ac
g-40.sgi.admin.user.prog.vulnerabilities.asc
acdbf5ea7e925db4f158983d6aac4b08fe662bad43dbef260bb223a9983415c4
h-75.solaris.solstice.adminsuite.txt
f416e3e1b7665d7eb3e370e92b593a23ca0e6745a14683e1debc85f05c39677e
This advisory describes a vulnerability in the Solaris admintool and gives a workaround.
a67fc62c820aac9ee488503d3dba867f74410e0bd3a1058e3c9d42f5ca783d2b