3261 matches found
CVE-2003-0203
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner...
CVE-2003-0203
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner...
CVE-2003-0203: Undefined Security Weakness
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner...
CVE-2002-0598: Undefined Security Weakness
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner...
IMAP Service Banner Retrieval
An IMAP Internet Message Access Protocol server is installed and running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11414; scriptversion "$Revision: 1.11 $"; scriptnameenglish:"IMAP Service Banner Retrieval"; scriptcopyrightenglish:"This script...
moxftp 2.2 - Banner Parsing Buffer Overflow
moxftp 2.2 - Banner Parsing Buffer Overflow source: https://www.securityfocus.com/bid/6921/info A buffer overflow vulnerability has been reported for moxftp. The vulnerability occurs when moxftp is parsing 'Welcome' banner messages from remote FTP servers. When moxftp receives an overly long FTP...
moxftp.txt
I. BACKGROUND According to the vendor moxftp is a "Ftp shell under X Window System". /usr/ports/ftp/moxftp II. DESCRIPTION Insufficient bounds checking leads to execution of arbitrary code. III. ANALYSIS Upon parsing the '220 welcome to server' ftp banner a buffer can be overrun, allowing us to...
moxftp 2.2 - Banner Parsing Buffer Overflow
source: https://www.securityfocus.com/bid/6921/info A buffer overflow vulnerability has been reported for moxftp. The vulnerability occurs when moxftp is parsing 'Welcome' banner messages from remote FTP servers. When moxftp receives an overly long FTP banner, it will trigger the overflow...
CVE-2002-1950
Cross-site scripting XSS vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the 1 the email parameter of add.php or 2 the banner URL banurl parameter in the main list...
CVE-2002-2191
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner...
Security Patchs for PHP Products
PHPSecure made some patchs for security holes in PHP products. Here is the list : - ALP - Banner Ad 2.0 : http://www.phpsecure.org/index.php?id=1&zone=pDl More details : http://online.securityfocus.com/search?category=22&query=ALP - Tight Auction 3.0 :...
Alcatel OmniSwitch 7700/7800 Switches Backdoor Access (deprecated)
This plugin has been deprecated due to excessive false positives since it flags any telnet banner discovered on TCP 6778. %NASLMINLEVEL 999999 This script was written by deepquest See the Nessus Scripts License for details Modifications by rd: - added ref:...
Unknown Service Detection: Banner Retrieval
Nessus was unable to identify a service on the remote host even though it returned a banner of some type. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11154; scriptversion"1.69"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/07/26";...
Lotus Domino 5.0.8-9 - Non-Existent NSF Database Banner Information Disclosure
Lotus Domino 5.0.8-9 - Non-Existent NSF Database Banner Information Disclosure source: https://www.securityfocus.com/bid/6128/info Lotus Domino reportedly discloses sensitive banner information when a non-existent NSF database is requested. This may allow a remote attacker to discover information...
CVE-2002-1094
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the 1 SSH banner, 2 FTP banner, or 3 an incorrect HTTP request...
CVE-2002-1094
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the 1 SSH banner, 2 FTP banner, or 3 an incorrect HTTP request...
CVE-2002-1094: Undefined Security Weakness
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the 1 SSH banner, 2 FTP banner, or 3 an incorrect HTTP request...
CVE-2002-0598
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner...
CVE-2002-0608: Undefined Security Weakness
Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner...
KPMG-2002014: Foundstone Fscan Format String Bug
-------------------------------------------------------------------- Title: Foundstone Fscan Format String Bug BUG-ID: 2002014 Released: 19th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in Foundstone Fscan could result in a malicious...