5993 matches found
[SECURITY] [DSA 699-1] New netkit-telnet-ssl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 699-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 697-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...
CVE-2004-1211
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via long arguments to the 1 EXAMINE, 2 SUBSCRIBE, 3 STATUS, 4 APPEND, 5 CHECK, 6 CLOSE, 7 EXPUNGE, 8 FETCH, 9 RENAM...
CVE-2004-1211
CVE-2004-1211 targets Mercury/32 4.01a IMAP service and describes multiple buffer overflows that allow remote authenticated users to crash the application and potentially execute arbitrary code via long arguments to various IMAP commands (EXAMINE, SUBSCRIBE, STATUS, APPEND, CHECK, CLOSE, EXPUNGE,...
CVE-2004-1211
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via long arguments to the 1 EXAMINE, 2 SUBSCRIBE, 3 STATUS, 4 APPEND, 5 CHECK, 6 CLOSE, 7 EXPUNGE, 8 FETCH, 9 RENAM...
CVE-2004-1211: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via long arguments to the 1 EXAMINE, 2 SUBSCRIBE, 3 STATUS, 4 APPEND, 5 CHECK, 6 CLOSE, 7 EXPUNGE, 8 FETCH, 9 RENAM...
Multiple Mercury/32 buffer overflows
Multiple overflows in IMAP commands...
Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003.
Summary: Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003 http://www.pmail.com/. Details: Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. There are 14 vulnerable commands that can be used to cause buffer overflows to occur. After a successful login to the mail...
Mercury/32 Mail Server 4.01a - 'check' Buffer Overflow
===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ""; if $socket = IO::Socket::INET-newPeerAddr = $ARGV0, PeerPort = "143", Proto = "TC...
Mercury/32 v4.01a IMAP RENAME Buffer Overflow
This module exploits a stack buffer overflow vulnerability in the Mercury/32 v.4.01a IMAP service. Module Options msf use exploit/windows/imap/mercury/rename msf undefinedrename show actions ...actions... msf undefinedrename set ACTION msf undefinedrename show options ...show and set options... m...
Debian DSA-086-1 : ssh-nonfree - remote root exploit
We have received reports that the 'SSH CRC-32 compensation attack detector vulnerability' is being actively exploited. This is the same integer type error previously corrected for OpenSSH in DSA-027-1. OpenSSH the Debian ssh package was fixed at that time, but ssh-nonfree and ssh-socks were not...
linux/x86 symlink . /bin/sh 32 bytes
linux/x86 symlink . /bin/sh 32 bytes. Shellcode exploit for linx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme mai...
CVE-2004-0001: Undefined Security Weakness
Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges...
SSH1 CRC-32 detect_attack Function Overflow
Binary data 1980.prm...
Oracle 8i TNS Listener SERVICE_NAME Buffer Overflow
This module exploits a stack buffer overflow in Oracle. When sending a specially crafted packet containing a long SERVICENAME to the TNS service, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/oracle/tns/servicename msf undefinedservicename show actions...
CVE-1999-1085
The CVE-1999-1085 issue affects SSH1 protocol implementations (notably OpenSSH and SSH1-supporting SSH stacks) in CBC or CFB mode. A CRC-32 checksum weakness enables a known-plaintext attack to insert arbitrary data into an existing SSH stream between client and server, potentially allowing an at...
CVE-1999-1021: Undefined Security Weakness
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade...
WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS
WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5, probably others DESCRIPTION 1 Directory Traversal WFTPD v3.00 R5 is vulnerable to a directory traversal bug that allows remote users to browse through any directory on the...
CVE-2001-0144
Technical details about CVE-2001-0144 are not provided in the connected documents. The Initial Description notes an SSH1 CRC-32 overflow issue, but no vendor/version/exploit data is supplied here. Monitor for updates and disclose when more info becomes public.