DEBIAN-CVE-2002-1365

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses...

CVE-2002-1069

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...

Domain Name System (DNS) resolver libraries vulnerable to read buffer overflow

Overview DNS stub resolvers from multiple vendors contain a buffer overflow vulnerability. The impact of this vulnerability appears to be limited to denial of service. Description A read buffer overflow vulnerability exists in BIND 4 and BIND 8.2.x stub resolver libraries. Other resolver librarie...

CVE-2002-1069

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...

PT-2002-1727 · Netfilter · Netfilter

Name of the Vulnerable Software and Affected Versions: Netfilter "iptables" versions 1.2.6a and earlier Description: The Network Address Translation NAT capability leaks translated IP addresses in ICMP error messages. Recommendations: For versions 1.2.6a and earlier, consider disabling the NAT...

Metacart vuln.

Summary MetaCart2.sql is an ASP based shopping Cart application with SQL database. A security vulnerability in the product allows attackers to access the database used for storing user provided data Credit cart numbers, Names, Surnames, Addresses, E-mails, etc. Details Exploit: Accessing any of t...

Advisory CA-2002-12 Format String Vulnerability in ISC DHCPD

CERT Advisory CA-2002-12 Format String Vulnerability in ISC DHCPD Original release date: May 8, 2002 Last revised:-- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected ISC DHCPD 3.0 to 3.0.1rc8 inclusive Overview The Internet Software Consortium ISC...

CVE-1999-1233

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

CVE-2001-0660

CVE-2001-0660 affects Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier. The back-end function that processes the Global Address List (GAL) can be accessed without authentication, allowing remote attackers to identify valid user email addresses stored in the GAL. Connected sourc...

CVE-2001-0660

Outlook Web Access OWA in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list GAL...

Проблемы с "бесточечными" адресами в Internet Explorer (protection bypass)

Бесточечные адреса в Internet Explorer считаются относящимися к Intranet-зоне...

[Fwd: Failed mail]

Well I tried to mail this to the SCO / Caldera security aliases but they keep bouncing back so I will send it here instead... this is regarding the recent DT overflows on OpenUnix8. -KF -------- Original Message -------- Subject: Failed mail Date: Mon, 1 Oct 2001 17:08:31 PDT From: MMDF Mail Syst...

CVE-1999-1515

The CVE-1999-1515 entry describes a vulnerability in the TenFour TFS Gateway 4.0 where a non-default configuration enables a denial-of-service. The issue arises from messages with incorrect sender and recipient addresses, causing the gateway to repeatedly attempt to return the message every 10 se...

CVE-2001-1445

Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands...

CVE-2000-1002

The CVE-2000-1002 vulnerability affects the POP3 daemon in Stalker CommuniGate Pro 3.3.2 where authentication error handling reveals whether a username exists by returning different messages for invalid usernames versus invalid passwords. This information leakage enables remote attackers to enume...

DoS против AVIRT Mail

Переполнение буфера при длинных адресах отправителя или получателя...

CVE-2000-0251

HP-UX 11.04 VirtualVault (VVOS) is affected by CVE-2000-0251. The issue involves VVOS sending data to unprivileged processes via an interface that has multiple aliased IP addresses. This exposes sensitive data to unprivileged processes, with the documented impact indicating partial integrity comp...

CVE-2000-0251

HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...

NAI Gauntlet mishandling of NAT

In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...

CVE-2000-0251

HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...