Internet Explorer incorrectly validates certificates when CRL checking is enabled

Overview Microsoft Internet Explorer IE fails to properly validate certificates when CRL checking is enabled. As a result, sensitive information may be exposed. Description Digital certificates are small documents used to authenticate and encrypt information transmitted over the Internet. One ver...

Innfeed Buffer Overflow

====================================================================== Defcom Labs Advisory def-2001-19 innfeed buffer overflow Author: Enrique A. Sanchez Montellano @defcom.com Author: Alex Hernandez [email protected] Release Date: 2001-04-18...

MDaemon IMAP Denial Of Service

Advisory Name:MDaemon IMAP Denial Of Service Discovered:23rd Of March 2001 Application:Alt-N Technologies MDaemon 3.5.6 - Other versions most likely prior to this Platform:Windows 2k,95/98/NT - others unknown Severity:Denial of service from application Credit:[email protected] Vendor Status:Unkno...

Buffer oveflow in FTPFS (linux kernel module)

FTPFS http://sourceforge.net/projects/ftpfs is a Linux kernel module, enhancing VFS with FTP volume mounting capabilities. However, it has insufficient bounds checking. If a user can enter mount options through a wrapper, he can take over the whole system, even with restricted capabilities. Here'...

Rob Malda ASCDC 0.3 - Local Buffer Overflow (2)

Rob Malda ASCDC 0.3 - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2462/info ascdc is a program written for X by Rob Malda. It is designed to provide a graphical interface to cd changing on linux systems. A vulnerability in the program could allow elevated privileges on a...

Rob Malda ASCDC 0.3 - Local Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/2462/info ascdc is a program written for X by Rob Malda. It is designed to provide a graphical interface to cd changing on linux systems. A vulnerability in the program could allow elevated privileges on a system with the package installed setuid. Due t...

Rob Malda ASCDC 0.3 - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2462/info ascdc is a program written for X by Rob Malda. It is designed to provide a graphical interface to cd changing on linux systems. A vulnerability in the program could allow elevated privileges on a system with the package installed setuid. Due ...

sendtemp.pl Read Access to Files

Exploit for cgi platform in category web applications ================================ sendtemp.pl Read Access to Files ================================ !/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read...

datawizards ftpxq 2.0.93 - Directory Traversal

datawizards ftpxq 2.0.93 - Directory Traversal source: https://www.securityfocus.com/bid/2426/info FtpQX is a ftp daemon designed to provide ftp services for Microsoft Operating Systems. It is maintained and distributed by Datawizard Technologies. A problem in the software could allow access to...

datawizards ftpxq 2.0.93 - Directory Traversal

source: https://www.securityfocus.com/bid/2426/info FtpQX is a ftp daemon designed to provide ftp services for Microsoft Operating Systems. It is maintained and distributed by Datawizard Technologies. A problem in the software could allow access to restricted resources. Due to insufficient input...

CVE-2000-0974

GnuPG gpg 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection...

CVE-2001-1474

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache...

Дырка в виртуальной машине Java клиента Lotus Notes

Дырка в виртулаьной машине позволяет проверять наличие файла на клиентской машине...

Joe Kloss RobinHood 1.1 - Remote Buffer Overflow

source : https://www.securityfocus.com/bid/1944/info RobinHood is a HTTP/1.1 web server based upon libHTTP and is designed for the BeOS platform. Improper bounds checking exists in code that handles requests RHCWindow.cpp and RHLogger.cpp. The components RHConsole and RHDaemon will cease operatio...

Avirt Mail 4.x DoS

Issue: ------ Avirt Mail 4.x up to latest version is vulnerable to denial of service while handling a SMTP session. Tested versions: ---------------- Avirt Mail 4.0 build 4124 - vulnerable Avirt Mail 4.2 build 4807 - vulnerable Both versions where tested on Windows 98 since I do not have access...

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service // source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the...

Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service

// source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the 'RCPT TO:' field will crash the application upon terminati...

Possible remote vulnerability problem in TIS FWTK x-gw?

Hello all, I got around to checking out TIS FWTK for format string problems. It's a free-for-non-commercials firewall proxy package. The sources etc. can be obtained from http://www.tis.com/research/software/fwtkreadme.html. Tried to contact [email protected], mail bounced. Oh well. This is usuall...

pine421.txt

/ PINE Exploit 4.21 bTm Proof of Concept: Pine 4.21 There exists a vulnerability in Pine 4.21 involving the portion of code in charge of peroidically checking email when a pine client is open. Run pine in one window, then send an email to the account owning that session. Switch back over and hit...

[SECURITY] New version of horde and imp released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : horde and imp Problem type...