text: <html>
   
   <!--#config errmsg="" --> 
   <!--#include virtual="/zinc/required/tn1_head.html" -->
   <!--#include virtual="/zinc/required/tn2_mirror_options.html" -->
   <!--#include virtual="/zinc/required/tn3_gradient.html" -->
   <!--#include virtual="/zinc/required/tn4_topnav.html" -->
   <!--#include virtual="/zinc/required/tn5_gradient2.html" -->
   
   <!-- // End: Top Area // -->
   
   <!--#include virtual="/zinc/required/container_top.html" -->
   
   <!-- // Start: Main Content Area // -->
   
   
  <span class="sect">&nbsp;<b>Section: </b>&nbsp;<a href="/">..</a>&nbsp;/&nbsp;0508-exploits&nbsp; /</span><br /><br />
  
  <center>
  <table border=0 align=center width=90%>
  <tr><td>
  
  </td></tr></table>
  </center>
  <p>
  <table border="0" cellpadding="2" cellspacing="1" width="90%" align="center"><tr><td valign="top" nowrap width="50%">Page 3 of 5</td><td></td></tr><tr><td valign="top" nowrap>
  <a href="indexdate2.html">&lt;&lt;</a>&nbsp;<a href="indexdate.html">1</a>&nbsp;<a href="indexdate2.html">2</a>&nbsp;<b>3</b>&nbsp;<a href="indexdate4.html">4</a>&nbsp;<a href="indexdate5.html">5</a>&nbsp;<a href="indexdate4.html">&gt;&gt;</a>&nbsp;</td><td align="right">Files 50 - 75 of 105</td></tr>
  <tr><td>Currently sorted by: Last Modified</td><td align="right">Sort By: <a href="/0508-exploits/index.html">File Name</a>, <a href="/0508-exploits/indexsize.html">File Size</a> </td></tr></table>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/phpfreenews140.txt>phpfreenews140.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  PHPFreeNews versions 1.40 and below are susceptible to SQL injection and cross site scripting attacks. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:matrix_k[at]adv.bg">matrix killer</a>, <a href="mailto:h4cky0u[at]gmail.com">h4cky0u</a></td></tr><tr class="finfo"><td><b>Homepage:</b></td><td><a target="_blank" href="http://www.h4cky0u.org">http://www.h4cky0u.org</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2808</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 18 09:30:54 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>678d0e34a1a7e5546aa2cd24aa7be7dd</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/phpAdsNew205.txt>phpAdsNew205.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  phpAdsNew and phpPgAds versions 2.0.5 and below suffer from an arbitrary file inclusion flaw. Detailed exploitation provided.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:max[at]jestsuper.pl">Maksymilian Arciemowicz</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>3018</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 18 09:23:35 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>1ed20310705df1b100b9b0f847ea67a1</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/phptbInject.txt>phptbInject.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  PHPTB versions 2.0 and below suffer from multiple PHP injection flaws.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:groszynskif[at]gmail.com">Filip Groszynski</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1843</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 18 08:58:47 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>f161d2f673c45c1b9acff4b010f0ef79</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/mediabox404.txt>mediabox404.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  mediabox404 WebRadio and WebTV manager is susceptible to a SQL injection attack that allows for login bypass. Versions 1.2 and below are vulnerable. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td>Cedric Tissieres</td></tr><tr class="finfo"><td><b>Homepage:</b></td><td><a target="_blank" href="http://www.objectif-securite.ch">http://www.objectif-securite.ch</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1669</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 18 08:56:24 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>a1587b7efad1ea40f3b4d70501538bb2</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/phpwebsite0101.txt>phpwebsite0101.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  phpWebSite 0.10.1 Full is susceptible to a SQL injection attack. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:matrix_k[at]abv.bg">matrix killer</a></td></tr><tr class="finfo"><td><b>Homepage:</b></td><td><a target="_blank" href="http://www.h4cky0u.org">http://www.h4cky0u.org</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1419</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 09:02:28 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>40292ad74f638c980c5ddda4c59fd430</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/EXPL-A-2005-010.txt>EXPL-A-2005-010.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Mac OS X Weblog Server version 10.4.0 is susceptible to cross site scripting attacks. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:wood[at]exploitlabs.com">Donnie Werner</a></td></tr><tr class="finfo"><td><b>Homepage:</b></td><td><a target="_blank" href="http://exploitlabs.com">http://exploitlabs.com</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2357</td></tr><tr class="finfo"><td nowrap><b>Related CVE(s):</b></td><td><a target="ext" href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2523">CAN-2005-2523</a></td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 08:43:04 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>e5ce4d28fb2dfcc5e952b605f9659858</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/sakeru.txt>sakeru.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Sakeru version 0.1 is a URL filtering bypass proof of concept tool that takes advantage of weaknesses in Websense, etc.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td>sinhack research labs</td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>6956</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 08:40:28 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>27a51ade94086288debec3a7f8de6f40</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/ECWshop.txt>ECWshop.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  ECW Shop version 6.0.2 suffers from cross site scripting, various injection, and disclosure vulnerabilities. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:JohnC[at]NoBytes.com">John Cobb</a></td></tr><tr class="finfo"><td><b>Homepage:</b></td><td><a target="_blank" href="http://www.NoBytes.com">http://www.NoBytes.com</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2023</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 08:35:33 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>75c91c659c362bb159406bb366bc7aff</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/x_osh2.pl.txt>x_osh2.pl.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Operator Shell (osh) 1.7-12 local root exploit. New version of an old exploit.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:core[at]bokeoa.com">Charles Stevenson aka core</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>4659</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 07:36:57 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>bbc767844763edfbf4e168e6b994939b</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/jgtcXSS.txt>jgtcXSS.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  jg-tc.com is susceptible to a multitude of cross site scripting flaws.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:jeff.peadro[at]gmail.com">Jeff Peadro</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1895</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 07:04:41 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>9e166a2972ea986026d7d3996a8b6a30</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/nordXSS.txt>nordXSS.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Nordstrom's website is susceptible cross site scripting attacks.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:jeff.peadro[at]gmail.com">Jeff Peadro</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>499</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 07:04:00 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>ccde934bcb2be4c445b17f410caaf369</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/citibankXSS.txt>citibankXSS.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Citibank's website in the UK is susceptible cross site scripting attacks.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:andrew.rse[at]gmail.com">Andrew Smith</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2584</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 07:02:15 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>8e84876372ebab674c0b73a3848af57e</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/phptb20.txt>phptb20.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  PHPTB Topic Boards 2.0 is susceptible to a SQL injection attack.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:almaster[at]hotmail.com">aLMaSTeR HaCKeR</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>593</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 07:00:23 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>58075d11875a9ffbfaccd264fc4f6380</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/ADSLFR4II.txt>ADSLFR4II.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Nth Dimension Security Advisory (NDSA20050719) - Mentor's ADSL-FR4II router, firmware version 2.00.0111 2004.04.09, is susceptible to unauthenticated administrative access, downloading of configuration files with the system password, and denial of service attacks. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:timb[at]nth-dimension.org.uk">Tim Brown</a></td></tr><tr class="finfo"><td><b>Homepage:</b></td><td><a target="_blank" href="http://www.nth-dimension.org.uk/">http://www.nth-dimension.org.uk/</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>3572</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 06:59:01 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>f3bbb1c54db3bfc7d745084f66ad82a6</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/jagoff.txt>jagoff.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  The JaguarControl ActiveX controller suffers from a buffer overflow exploit.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:tacettinkaradeniz[at]yahoo.com">Tacettin Karadeniz</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>7186</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 17 06:39:41 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>643f8b8022b4e721b3f4964731f4da5a</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/ezupload-2.2.0.pl>ezupload-2.2.0.pl</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Ezupload prior to v2.2.0 remote command execution exploit via file inclusion. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:whisky[at]bsdmail.org">Johnnie Walker</a></td></tr><tr class="finfo"><td><b>Related File:</b></td><td><a href="http://www.frsirt.com/bulletins/1747">1747</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2142</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 16 07:57:33 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>6a7199fabb717954ece8447f5c1f9a8c</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/mdaemon_imap.pm.txt>mdaemon_imap.pm.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Mdaemon 8.0.3 IMAP CRAM-MD5 authentication remote buffer overflow exploit.
  </td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2479</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 15 07:17:13 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>379e6bb2e530de9238d0c264ea2ef2d8</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/edirectory_imonitor.pm.txt>edirectory_imonitor.pm.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Novell eDirectory 8.7.3 iMonitor service remote buffer overflow exploit.
  </td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2235</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 15 07:15:34 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>fdf29f12ee0e8206f662c61a4ccf9757</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/zenworks_desktop_agent.pm.txt>zenworks_desktop_agent.pm.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Novell ZENworks 6.5 Desktop/Server Management remote stack overflow exploit.
  </td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>2711</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 15 07:13:39 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>678bf1fc3cd9aa603ec1771ffe7855f5</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/rsaXSS.txt>rsaXSS.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Definition of irony: Three cross site scripting vulnerabilities have been discovered in the RSA Security Blog entitled &quot;Speaking of Security&quot;.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:rodrigo[at]rgsc.cl">Rodrigo Gutierrez</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1275</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 15 07:05:37 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>1d0636b787b9e7133990aaf3e0fd0cbe</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/HOD-ms05039-pnp-expl.c>HOD-ms05039-pnp-expl.c</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Microsoft Windows Plug-and-Play remote overflow universal exploit that is related to MS05-039. Vulnerable systems include: Microsoft Windows Server 2003 SP1, Microsoft Windows XP SP1 and SP2, and Microsoft Windows 2000 SP4. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:houseofdabus[at]inbox.ru">houseofdabus</a></td></tr><tr class="finfo"><td><b>Related Exploit:</b></td><td><a href=""/0508-exploits/ms05039.c"">ms05039.c"</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>14264</td></tr><tr class="finfo"><td nowrap><b>Related CVE(s):</b></td><td><a target="ext" href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1983">CAN-2005-1983</a></td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 13 09:01:08 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>d6dc9aaaab54213702bd9facbedf2e7c</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/kavLocalRoot.txt>kavLocalRoot.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Due to the logs directory being 777 by default, Kaspersky AntiVirus 5.5 is susceptible to a local root exploit via a symlink attack. Details are provided.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:info[at]aerasec.de">Dr. Peter Bieringer</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>15672</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 13 08:56:49 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>cb19145c1046533f786fc038e618534f</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/grandstream-DoS.pl.txt>grandstream-DoS.pl.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Denial of service exploit for the Grandstream Budge Tone 101/102 VOIP phone that sends UDP packets larger than 65534 bytes in size to port 5060. 
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:kroma[at]syss.de">Pierre Kroma</a></td></tr><tr class="finfo"><td><b>Related File:</b></td><td><a href="/0508-advisories/Grandstream.txt">Grandstream.txt</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1288</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 13 08:52:52 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>55b5381d4cdf567a6ccc4d0618081fbc</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/MyBBRC4.txt>MyBBRC4.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Multiple SQL injection vulnerabilities exist in MyBB RC 4.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td>Phuket</td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1875</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 13 08:42:47 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>780f66ab57fa4b0c488ea8c658e9180f</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  <p>
  
  <center><div class="fbox1"><table border="0" cellpadding="0" cellspacing="0" class="fbox2" width="100%"><tr><td>
  <table border="0" cellpadding="2" cellspacing="1" width="100%" align="center">
  <tr class="fname">
  <td valign="top" nowrap width="100">&nbsp;<span class="grip">///</span>&nbsp; <b>File Name:</b></td>
  <td nowrap><a class="fname" href=/0508-exploits/clarolineTraverse.txt>clarolineTraverse.txt</a></td></tr>
  <tr class="finfo"><td valign="top"><b>Description:</b><br /></td><td valign="top">
  Claroline 1.6.1 is vulnerable to multiple directory traversal attacks. Teacher access is needed for successful exploitation.
  </td></tr><tr class="finfo"><td><b>Author:</b></td><td><a href="mailto:robbedekeyzer[at]hotmail.com">Robbe De Keyzer</a></td></tr><tr class="finfo"><td nowrap><b>File Size:</b></td><td>1832</td></tr><tr class="finfo"><td nowrap><b>Last Modified:</b></td><td nowrap>Aug 13 08:41:12 2005</td></tr>
  <tr class="finfo"><td nowrap><b>MD5 Checksum:</b></td><td>a6a8f5daf900f15a89847adab37ab590</td></tr>
  </table>
  </td></tr></table></div></center>
  
  </p>
  
  
  <!-- // End: Main Content Area // -->
  
  <!--#include virtual="/zinc/required/container_right.html" -->
  
  <!-- // Start: Side Bar Area // -->
  
  
  <!--#include virtual="/zinc/sidebar/sb_spacer.html" -->
  <!--#include virtual="/zinc/sidebar/sb_last10.html" -->
  <!--#include virtual="/zinc/sidebar/sb_advisories10.html" -->
  <!--#include virtual="/zinc/sidebar/sb_exploits10.html" -->
  <!--#include virtual="/zinc/sidebar/sb_tools10.html" -->
  <!--#include virtual="/zinc/sidebar/sb_misc10.html" -->
  
  <!-- // End: Side Bar Area // -->
  
  
  <!--#include virtual="/zinc/required/footer.html" -->
  
  </html>
  
  