Microsoft Internet Explorer 56 - FTP Web View Cross-Site Scripting

Microsoft Internet Explorer 56 - FTP Web View Cross-Site Scripting source: https://www.securityfocus.com/bid/4954/info A cross site scripting issue has been reported with some versions of Microsoft Internet Explorer for Windows. Under some configurations, data included within a FTP URL will be...

eDonkey 2000 ed2k: URL Buffer Overflow

Background: eDonkey 2000 http://www.edonkey2000.com is a popular peer to peer file sharing network with clients for Windows, Mac and Linux. One of the attractive features of the client is the addition of the ed2k 'virtual' protocol which allows for URLs which can start a download through the clie...

Microsoft Exchange 2000 exhausts server resources while attempting to process malformed mail attributes

Overview Microsoft Exchange 2000 contains a vulnerability that allows remote attackers to conduct a denial-of-service attack that once begun, cannot be stopped until the crafted message has been completely processed. Description Microsoft Exchange 2000 contains a vulnerability in its handling of...

Advisory CA-2002-14 Buffer overflow in Macromedia JRun

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-14 Buffer overflow in Macromedia JRun Original release date: May 29, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Windows NT4 or Windows 2000 running IIS versions 4...

CVE-2002-0263

Buffer overflow in EasyBoard 2000 1.27 aka EZboard allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to 1 ezboard.cgi, 2 ezman.cgi, or 3 ezadmin.cgi...

war-ftpd-bof.pl

use IO::Socket; $port=21; $|=1; Kernel32 jmp esp 7754a3ab Kernel32 MessageBoxA 77e375d5 MSVCRT cexit 78003985 print "\tRemote Buffer overflow of user in WarFTPd 1.65 for Win2k\n\n\tBy [email protected]\n\n"; print "\tEnter The Target IP :"; $ip = ; chomp $ip; $host = inetaton$ip; $ServerAddr =...

Yahoo! Messenger 5.0 - Call Center Buffer Overflow

Yahoo! Messenger 5.0 - Call Center Buffer Overflow // source: https://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for...

Microsoft Windows 2000 Event Viewer contains buffer overflow

Overview The Windows 2000 event viewer contains a buffer overflow. Description The Microsoft Windows 2000 event viewer contains a buffer overflow that can be exploited when a record written to an event log is examined by the event viewer. Both privileged and unprivileged users can read and write ...

Microsoft Windows 2000 Active Directory LDAP DoS

Malformed LDAP-request causes Active Directory to hang...

Microsoft Windows 2000 System Monitor ActiveX Control contains buffer overflow

Overview There is a buffer overflow in the System Monitor ActiveX control that ships with Windows 2000. Description The System Monitor ActiveX control sysmon.ocx included with Windows 2000 contains a buffer overflow. For more information, see...

Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/4789/info CMailServer is vulnerable to a buffer overflow condition. It has been reported that the CMailServer does not perform proper bounds checking on the USER argument. It is possible for a remote malicious attacker to craft a request that will resu...

Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior

Date: Mon, 20 May 2002 13:24:26 -0700 From: Foundstone Labs [email protected] To: [email protected] Subject: Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior Please disregard the previous email. Can you please forward this to the bugtraq mailing list? Thanks, Marshall...

Youngzsoft CMailServer 3.304.0 - Remote Buffer Overflow (2)

Youngzsoft CMailServer 3.304.0 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/4789/info CMailServer is vulnerable to a buffer overflow condition. It has been reported that the CMailServer does not perform proper bounds checking on the USER argument. It is possible for a...

CVE-2002-0224

The MSDTC Microsoft Distributed Transaction Service Coordinator for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service crash or hang via malformed random input...

Windows 2000 Server IIS 5.0 .ASP Overflow Exploit

Summary: ======== The following code will allow you to safely test your system for the below motioned vulnerability. For more information about this vulnerability see http://www.eeye.com/html/press/PR20020410.html previous article:"windows 2000 and NT4 IIS .ASP Buffer Overflow". The following cod...

CVE-2001-1238

Task Manager in Windows 2000 cannot end certain processes with uppercase names (e.g., winlogon.exe, csrss.exe, smss.exe, services.exe) via the Process tab. This could allow local users to install Trojan horses that cannot be stopped with Task Manager. Documents do not provide a fix or patch; PT-S...

CVE-2001-1238

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named 1 winlogon.exe, 2 csrss.exe, 3 smss.exe and 4 services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager...

CVE-2002-0263

Buffer overflow in EasyBoard 2000 1.27 aka EZboard allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to 1 ezboard.cgi, 2 ezman.cgi, or 3 ezadmin.cgi...

CVE-2001-1288

Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...

CVE-2002-0263

Affected product : EasyBoard 2000 1.27 (EZboard). Vulnerability : buffer overflow in the handling of multipart Content-Type headers enables remote code execution by sending a long boundary value to one of three CGI scripts: ezboard.cgi, ezman.cgi, or ezadmin.cgi. Cause : overflow in the boundary ...