WebMaster ConferenceRoom 1.8 Developer Edition - Denial of Service

source: https://www.securityfocus.com/bid/2178/info WebMaster ConferenceRoom Developer Edition is a chat package which enables a large community of users to chat together. ConferenceRoom has a wide range of capabilities and a user friendly channel moderation feature. It is possible to cause a...

CA's InoculateIT Agent for Exchange Server

Hi, I'm new in the list, my 1st msg: The CA's InoculateIT Agent for Exchange Server cannot detect some messages that have the SMTP headers changed. In October/1999 I reported it to local CA support office, but still now nothing have done. Guys at [email protected] seem to ignore my messages. The bug...

swstack.txt

Simple Web Server 0.5.1 bug report ================================== I have recently noticed an interesting bug in Simple Web Server 0.5.1, while browsing around various http daemon codes. apperantly sws uses a small routine that adds your socket input, char by char, into an array of strings see...

Security Bug in Jana HTTP Server

Hello Bugtraqers, I found a directory travelling bug again, this time in JANA HTTP Server software available as freeware from http://www.jana-server.ocm.de . Here is a copy of the mail I sended to the author. eAX -------------------------------------------- Hello Thomas, I got your proxy/perver...

beos.dos.txt

Problem: It is possible to crash the BeOS networking process. Discussion: The BeOS networking stack crashes when certain malformed packets are sent to it. This document explains two such packets. The first is an IP packet with the protocol field set to TCP. If the IP length field is set to be...

elm_filter.txt

Subject: elm filter program To: [email protected] Mark Ultor wrote: I've found a bug in filter on Elm 2.4 PL25. filter got SGID on mail group. sowatech:$ filter -f perl -e ' print "A" x 5000' Segmentation fault "filter" is inherently unsafe. A bug has been described in 1995 which allows...

counter.exe.2.70.dos.txt

Date: Wed, 19 May 1999 02:00:11 +0100 From: Mnemonix To: [email protected] Subject: Denial of Service in Counter.exe version 2.70 A denial of service exists in counter.exe version 2.70, a fairly popular webhit counter used on the Win32 platform with web servers such as IIS and...

solaris.7.procfs.dos.txt

Date: Tue, 9 Mar 1999 22:17:19 +0200 From: Toomas Soome To: [email protected] Subject: 64 bit Solaris 7 procfs bug hi! there is bug with 64 bit solaris 7 procfs, every nonprivileged user can crash computer with command 'more /proc/self/psinfo'. Tested with UE3000, U10, UE450. This bug has been...

vintra.txt

From: Vytis Fedaravicius Subject: DOS in Vintra systems Mailserver software. Hello, There is a bug in a free MailServer software for Windows NT from Vintra systems http://www.vintra.com/mailsrvr.html . Any remote user can cause MTA to go nuts and make CPU ussage up to 99%, eat all available memor...

iss.brute.force.txt

ISS Internet Scanner Brute Force Bug alexander tampermeier [email protected] Wed, 17 Feb 1999 23:54:11 PST The Internet Scanner lets you brute force by using username/password pairs specified in the file default.login. I specified a known username/password pair but the scanner could not...

lotus.notes.crypto.txt

Date: Fri, 26 Mar 1999 21:25:10 GMT From: KevinLynch/CAM/[email protected] To: [email protected] Subject: Re: Lotus Notes security advisory Security Advisory Application: Lotus Notes Client R4.5 and Later Summary: As reported March 23, 1999 by Martin Bartosch of Deutsche Bank AG, there is a bug ...

nt4+sp4.filename.length.txt

Bug in WinNT 4.0 SP4 Alvaro Gilabert [email protected] Mon, 19 Apr 1999 15:15:36 +-200 Hi, I supose it is a bug and I will explain why do I think so You can exceed the limit in the number of chars allowed in a filename. WinNT does allow it. You can move a folder to a deeper one exceeding it. But,...

dpec-course-passwds.txt

Date: Fri, 15 Jan 1999 21:45:24 -0700 From: Joel Knight To: [email protected] Subject: DPEC Online Courseware DPEC's www.dpec.com Online Courseware has a nasty bug in it that allows anyone to change anyone elses password without knowing what their current password is. This is NOT limited to...

netscape-internal-parser.cgi

Date: Mon, 5 Oct 1998 16:33:13 -0400 From: Jim Paris To: [email protected] Subject: Remote CGI can crash Netscape 4.x Netscape 4.x will crash when given a content-type of "internal/parser". Earlier versions seem unaffected. Tested versions are 4.05 and 4.5b1. Under Win95 it simply hangs and...

bigfoot-bellsouth-webmail.txt

Date: Fri, 8 Jan 1999 07:07:20 -0600 From: "Madere, Russel" To: [email protected] Subject: Bigfoot/Bellsouth Webmail bug I seem to have found another "bug" with the Bigfoot/Bellsouth Webmail. Users can log back into the service from cached pages. This is a huge security hole, especially for...

xfs.txt

Bug in xfs Lukasz Trabinski [email protected] Tue, 30 Mar 1999 00:14:34 +0200 Hello, I hope that's information will be useful for making new patch for XFree86. I found bug in xfs Packet XFree86-xfs-3.3.3.1-1 in RedHat 5.1 and probably in RedHat 5.2 updates, too Xfs is a font server for...