Search:Author:L0PHT - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

ID: L0PHT
Name: @stake, Inc. (L0pht team)
URL: http://www.atstake.com

antisniff 1.02

[VulnWatch] Vignette Application Portal Unauthenticate Diagnostics
@stake advisory: Lexar JumpDrive Secure Password Extraction
@stake advisory: Pingtel Xpressa Denial of Service
@stake advisory: HP dced Remote Command Execution Multiple OSes
@stake advisory: WebSTAR (5.3.2 and below) Multiple Vulnerabilities
[VulnWatch] @stake: AppleFileServer Remote Command Execution
[VulnWatch] Netegrity SiteMinder Affiliate Agent Cookie Overflow
Mac OS X pppd format string vulnerability
Microsoft Virtual PC Services Insecure Temporary File Creation
MacOS X TruBlueEnvironment Buffer Overflow
SAP DB priv. escalation/remote code execution
SAP DB web-tools multiple issues
Mac OS X Long argv[] buffer overflow
Mac OS X Arbitrary File Overwrite via Core Files
Mac OS X Systemic Insecure File Permissions
Opera HREF escaped server name overflow
Nokia Electronic Documentation - Multiple Vulnerabilities
Sustworks Unauthorized Network Monitoring and tcpflow format string attack
ePolicy Orchestrator multiple vulnerabilities
Microsoft SQL Server local code execution
Microsoft SQL Server DoS
Windows NT 4.0 with IBM JVM Denial of Service
Pipe Filename Local Privilege Escalation FAQ
Named Pipe Filename Local Privilege Escalation
Nokia GGSN (IP650 Based) DoS
Apple AirPort Administrative Password Obfuscation (a051203-1)
MacOS X DirectoryService Privilege Escalation (a041003-1)
Vignette Story Server sensitive information disclosure (a040703-1)
McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1)
Sun ONE (iPlanet) Application Server Connector Module Overflow
Nokia SGSN (DX200 Based Network Element) SNMP issue
QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities
@stake Advisory: MacOS X TruBlueEnvironment Privilege Escalation Attack
Etherleak: Ethernet frame padding information leakage (A010603-1)
Microsoft Terminal Server Client Buffer Overrun (A082802-1)
@stake Advisory: Multiple Vulnerabilities with Pingtel xpressa SIP Phones
@stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities
@stake Security Advisory: Remote Vulnerabilities in Bugzilla (A043001-1)
@stake Security Advisory: G6 FTP File Existence Disclosure and Netbios Hash Retrieval (A040301-1)
@stake Security Advisory: Windows PGP (Pretty Good Privacy) ASCII Armor Parser Vulnerability (A040901-1)
@stake Advisory Notification: Netscape Directory Server buffer overflow (A030701-1)
REVISION: @stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)
@stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)
@stake Advisory Notification: Parsing Overflow in Microsoft Power Point 2000 (a012301-1)
@stake Advisory: PalmOS Password Retrieval and Decoding (A092600-1)
SafeWord e.Id Trivial PIN Brute-Force Vulnerability
@stake Advisory: IIS 4.0/5.0 Phone Book server buffer overrun (A120400-1)
@stake Advisory: Microsoft SQL Server extended stored procedure vulnerability (A120100-1)
@stake Advisory: Windows 2000 .ASX Buffer Overrun (A112300-1)
@stake Advisory: Cisco VCO/4000 SNMP Username and Password Retrieval (A102600-1)
@stake Advisory: PHP3/PHP4 Logging Format String Vulnerability (A 101200-1)
@stake Advisory: All-Mail buffer overrun vulnerability (A101200-2 )
@stake Advisory: Multiple Vulnerabilities in iCal 2.1 (A100900-1)
@stake Advisory: Unauthorized "Directory Listings" under IIS 5.0 (A100400-1)
@stake Advisory: NTLM Replaying via Windows 2000 Telnet Client (A 091400-1)
@stake Advisory: SiteMinder Access Control Bypass (A0911 00-1)
@stake Advisory: DocumentDirect for the Internet (A090800-1)
@stake Advisory: SuSE Apache WebDAV Directory Listings (A090700-3 )
@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)
@stake Advisory: SuSE Apache CGI Source Code Viewing (A090700-2)
@stake iKey 1000 Security Advisory
Advisory: Office 2000 Scripting
Microsoft Office 2000 Advisory
NetStructure 7110 console backdoor
NetStructure 7180 remote backdoor vulnerability
Cartfix Secret Backdoor Patch tool for cart32
CRYPTOAdmin 4.1 server with PalmPilot PT-1 token 1.04 PIN Extract ion

test server