EUVD-2006-0454

Malware in sbrugna...

Input validation

A lack of input validation exists in tacplus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tacplus to inject shell commands and gain remote code execution on the tacplus server...

CVE-1999-0945: Buffer Copy without Checking Size of Input

Buffer overflow in Internet Mail Service IMS for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands...