Hummingbird InetD LPD buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1815 BID: 13788 OSVDB: 16957 Background Hummingbird InetD implements common UNIX services on Windows platforms. Problem The Hummingbird InetD LPD service is affected by a buffer overflow which allows remote command execution. Resolution Apply the patch. References...

IMail IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1256 BID: 13727 OSVDB: 16806 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, and a web interface and web calendaring service. Problem A buffer overflow when processing long mailbox names specified in the STAT...

Computer Associates Message Queuing

Added: 11/29/2005 CVE: CVE-2005-2668 BID: 14622 OSVDB: 18916 Background The Computer Associates Message Queuing service is used internally by multiple Computer Associates products. Problem The Computer Associates Message Queuing service is affected by multiple buffer overflows which could result ...

Computer Associates Message Queuing

Added: 11/29/2005 CVE: CVE-2005-2668 BID: 14622 OSVDB: 18916 Background The Computer Associates Message Queuing service is used internally by multiple Computer Associates products. Problem The Computer Associates Message Queuing service is affected by multiple buffer overflows which could result ...

Novell eDirectory iMonitor buffer overflow

Added: 11/29/2005 CVE: CVE-2005-2551 BID: 14548 OSVDB: 18703 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow when processing long HTTP or HTTPS requests leads to remote command execution. Resolution Upgrade to eDirectory 8.7.3 IR7 or highe...

Hummingbird InetD LPD buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1815 BID: 13788 OSVDB: 16957 Background Hummingbird InetD implements common UNIX services on Windows platforms. Problem The Hummingbird InetD LPD service is affected by a buffer overflow which allows remote command execution. Resolution Apply the patch. References...

Computer Associates Message Queuing

Added: 11/29/2005 CVE: CVE-2005-2668 BID: 14622 OSVDB: 18916 Background The Computer Associates Message Queuing service is used internally by multiple Computer Associates products. Problem The Computer Associates Message Queuing service is affected by multiple buffer overflows which could result ...

IMail IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1256 BID: 13727 OSVDB: 16806 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, and a web interface and web calendaring service. Problem A buffer overflow when processing long mailbox names specified in the STAT...

IMail IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1256 BID: 13727 OSVDB: 16806 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, and a web interface and web calendaring service. Problem A buffer overflow when processing long mailbox names specified in the STAT...

Novell eDirectory iMonitor buffer overflow

Added: 11/29/2005 CVE: CVE-2005-2551 BID: 14548 OSVDB: 18703 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow when processing long HTTP or HTTPS requests leads to remote command execution. Resolution Upgrade to eDirectory 8.7.3 IR7 or highe...

Hummingbird InetD LPD buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1815 BID: 13788 OSVDB: 16957 Background Hummingbird InetD implements common UNIX services on Windows platforms. Problem The Hummingbird InetD LPD service is affected by a buffer overflow which allows remote command execution. Resolution Apply the patch. References...

CA CAM log_security() Stack Buffer Overflow (Win32)

This module exploits a vulnerability in the CA CAM service by passing a long parameter to the logsecurity function. The CAM service is part of TNG Unicenter. This module has been tested on Unicenter v3.1. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2003-1287

Sambar Server (pre-6.0 beta 3) is vulnerable to remote code execution via a crafted HTTP request using an MS-DOS device name (e.g., com1.pl, con.pl, aux.pl). The vulnerability relies on Perl reading code from the associated device when processing the request, enabling an attacker with physical ac...

CVE-2003-1284

SambaR Server vulnerability CVE-2003-1284 involves information disclosure via default CGI scripts environ.pl and testcgi.exe. Multiple sources (NVD entry for CVE-2003-1284, OpenVAS NASL checks, and Nessus/plugin references) describe that these CGI programs disclose sensitive information such as t...

CVE-2003-1285

The provided data documents a concrete XSS vulnerability in Sambar Server prior to version 6.0 beta 6, listed as CVE-2003-1285. The issue affects multiple CGI paths by injecting arbitrary web script/HTML via query strings, including isapi/testisa.dll, testcgi.exe, environ.pl, samples/search.dll, ...

CVE-2003-1286

The CVE-2003-1286 issue affects Sambar Server prior to 6.0 beta 6. An HTTP Proxy vulnerability arises when security.ini lacks a 127.0.0.1 proxydeny entry, allowing remote attackers to send proxy HTTP requests to the server’s administrative interface and external web servers by issuing a Connectio...

Microsoft Windows Plug and Play Service UMPNPMGR buffer overflow

Buffer overflow on PNPGetDeviceList and PNPGetDeviceListSize calls for anonymous user on Windows 2000 and authenticated user on Windows 2003 / XP. There is another one similar vulnerability, leading to memory leak with DoS conditions...

CVE-2003-1272

CVE-2003-1272 affects Winamp 3.0. The vulnerability is described as multiple buffer overflows in Winamp’s b4s file handling, specifically when a long playlist name or a long path is passed to the Playstring parameter. This can allow a remote attacker to crash the application and potentially execu...

CVE-2003-1250

Affected product: Efficient Networks 5861 DSL router. Vulnerability: When running firmware 5.3.80 and configured to block incoming TCP SYN, the device can be remotely crashed by a flood of TCP SYN packets to the WAN interface (e.g., via a port scanner). Impact: Denial of service (device crash). E...

CVE-2003-1234

CVE-2003-1234 describes an integer overflow in the FreeBSD kernel’s f_count counter, affecting FreeBSD versions prior to 4.2 through 5.0. The vulnerability arises when fpathconf or lseek calls fail to decrement f_count via fdrop, potentially allowing a local user to trigger a denial of service (c...