SmartMax MailMax 4.8 - Popmax Buffer Overflow

// source: https://www.securityfocus.com/bid/5285/info Reportedly, MailMax is vulnerable to buffer overflow attacks against its POP3 daemon, popmax. The vulnerability occurs due to improper bounds checking of the 'USER' argument. It is possible for an attacker to cause the buffer overflow conditi...

3.34.04.2 MERCUR MailServer - Control-Service Buffer Overflow

3.34.04.2 MERCUR MailServer - Control-Service Buffer Overflow // source: https://www.securityfocus.com/bid/5261/info // MERCUR Mailserver is prone to a remotely exploitable buffer overflow condition. The condition is due to insufficient bounds checking in the Control-Service component, which...

3.3/4.0/4.2 MERCUR MailServer - Control-Service Buffer Overflow

// source: https://www.securityfocus.com/bid/5261/info // MERCUR Mailserver is prone to a remotely exploitable buffer overflow condition. The condition is due to insufficient bounds checking in the Control-Service component, which listens on TCP port 32000 by default. It is possible to corrupt...

Real Networks RealJukebox 1.0.2/RealOne 6.0.10 Player Gold - Skinfile Buffer Overflow

// source: https://www.securityfocus.com/bid/5217/info Real Software has announced a vulnerability in RealJukebox2 and Real Player Gold. A buffer overflow condition exists due to insufficient bounds checking of fields in skinfiles. There is an unchecked buffer for the "CONTROLnImage" field of the...

HP Tru64OSF1 DXTerm - Local Buffer Overflow

HP Tru64OSF1 DXTerm - Local Buffer Overflow source: https://www.securityfocus.com/bid/5746/info The HP Tru64/OSF1 dxterm utility is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient checking of command line input supplied via the "-xrm" parameter. This...

HP Tru64/OSF1 DXTerm - Local Buffer Overflow

source: https://www.securityfocus.com/bid/5746/info The HP Tru64/OSF1 dxterm utility is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient checking of command line input supplied via the "-xrm" parameter. This parameter serves the same purpose as the...

Pirch IRC 98 Client - Malformed Link Buffer Overrun

source: https://www.securityfocus.com/bid/5079/info Pirch is subject to a buffer overflow condition. The overrun occurs if a user receives on a maliciously constructed link. It is not confirmed whether the user must first click on the link or not. This issue is the result of inadequate bounds...

Pirch IRC 98 Client - Malformed Link Buffer Overrun

Pirch IRC 98 Client - Malformed Link Buffer Overrun source: https://www.securityfocus.com/bid/5079/info Pirch is subject to a buffer overflow condition. The overrun occurs if a user receives on a maliciously constructed link. It is not confirmed whether the user must first click on the link or no...

[DER ADV#8] - Local off by one in CVSD

Local off by one overflow in CVSD. intro: the family of scanf functions scanf, sscanf, fscanf are generally insecure in usage and steps have been taken to make them more...secure you might say like adding bounds checking sscanfhey, ".4096s d", buffer, int but the function still remains quite...

Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/4789/info CMailServer is vulnerable to a buffer overflow condition. It has been reported that the CMailServer does not perform proper bounds checking on the USER argument. It is possible for a remote malicious attacker to craft a request that will resu...

[NEWS] Lotus Domino Bindsock Notes_ExecDirectory Buffer Overflow Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

[NEWS] Lotus Domino Bindsock PATH Buffer Overflow Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

IRIX nsd symlink vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX nsd symlink vulnerability Number: 20020501-01-I Date: May 1, 2002 Reference: CAN-2002-0174 - ----------------------- - --- Issue Specifics --- - ----------------------- It has been reported that nsd was not checking the...

Melange Chat System 2.0.2 Beta 2 - '/yell' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4508/info Melange Chat System is a chat server program developed by Christian Walter. Currently support for this application is no longer available. Due to inadequate bounds checking in Melange, it is possible for users to initiate a buffer overflow...

Melange Chat System 2.0.2 Beta 2 - yell Remote Buffer Overflow

Melange Chat System 2.0.2 Beta 2 - yell Remote Buffer Overflow source: https://www.securityfocus.com/bid/4508/info Melange Chat System is a chat server program developed by Christian Walter. Currently support for this application is no longer available. Due to inadequate bounds checking in Melang...

File existance checking in Microsoft Internet Explorer

It's possible to check file existance with dynsrc property or with file:// URL in conjunction with javascript...

Icecast 1.x - AVLLib Buffer Overflow

Icecast 1.x - AVLLib Buffer Overflow // source: https://www.securityfocus.com/bid/4415/info Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms. Icecast does not properly check bounds on data sent from client...

Sambar Server 5.1 - Sample Script Denial of Service

Sambar Server 5.1 - Sample Script Denial of Service // source: https://www.securityfocus.com/bid/3885/info Sambar Server is a multi-threaded web server which will run on Microsoft Windows 9x/ME/NT/2000 operating systems. It is possible to cause a denial of service to Sambar Server by sending...

DNRD 1.x2.x - DNS RequestReply Denial of Service

DNRD 1.x2.x - DNS RequestReply Denial of Service source: https://www.securityfocus.com/bid/3928/info dnrd Domain Name Relay Daemon is a freely available, open-source proxy name server. It will run on a number of Unix and Linux distributions. There is a lack of sufficient bounds checking in DNS...

DNRD 1.x/2.x - DNS Request/Reply Denial of Service

source: https://www.securityfocus.com/bid/3928/info dnrd Domain Name Relay Daemon is a freely available, open-source proxy name server. It will run on a number of Unix and Linux distributions. There is a lack of sufficient bounds checking in DNS request and reply functions. As a result, it is...