Sendmail < 8.11.6 -d category Value Local Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a local buffer overflow allowing local users to gain root privileges. C Tenable Network Security, Inc. References also vulnerable to a heap overflow Date: Mon, 28 May 2001 18:16:57 -0400 EDT From: "Michal Zalewski"...

Hexyn-sa-19.txt

Hexyn / Securax Advisory 19 - Multiple FTP Server DoS Topic: Multiple FTP Server DoS Announced: 2001-02-17 Affects: Serv-U FTP Server, G6 FTP Server, WarFTPd Server,... DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE INFORMATION BELO...

Netscape SmartDownload 1.3 - Remote Buffer Overflow

Netscape SmartDownload 1.3 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/2615/info Netscape SmartDownload, a download manager add-on for popular web browsers, is vulnerable to a buffer overflow. The library 'sdph20.dll' used by SmartDownload contains an URL parser function th...

cfingerd 1.4 - Format String (1)

cfingerd 1.4 - Format String 1 source: https://www.securityfocus.com/bid/2576/info A format string bug in the logging facility of the cfingerd "Configurable Finger Daemon" allows remote users to attain root privileges and execute arbitrary code. cfingerd queries and logs the remote username of...

SSH CRC-32 Compensation Attack Remote Overflow

The remote host is running a version of SSH that is older than version 1.2.32, or a version of OpenSSH that is older than 2.3.0. The remote version of this software is vulnerable to a flaw known as a 'CRC-32 compensation attack' that could allow an attacker to gain a root shell on this host. C...

Microsoft IIS Unicode Remote Command Execution

The hotfix for the 'Webserver file request parsing' problem has not been applied. This vulnerability can allow an attacker to make the remote IIS server execute arbitrary commands. %NASLMINLEVEL 70300 Approved 22Apr01 jao replaces older version This script was first written Renaud Deraison then...

WU-FTPD site_exec() Function Remote Format String

The version of WU-FTPD hosted on the remote server does not properly sanitize the argument of the SITE EXEC command. It may be possible for a remote attacker to gain root access. This script was written by Alexis de Bernis Changes by Tenable: - rely on the banner if we could not log in - changed...

Imate SMTP Server HELO Command Remote Overflow DoS

The remote SMTP server crashes when it is issued a HELO command with an argument longer than 1200 chars. This problem may allow an attacker to shut down your SMTP server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10435; scriptversion "1.28";...

Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure

The version of FrontPage Extensions running on the remote host has an information disclosure vulnerability. Using a non-existent file as an argument to the 'shtml.exe' CGI reveals the local absolute path of the web root. A remote attacker could use this information to mount further attacks. C...

Microsoft FrontPage dvwssr.dll Multiple Vulnerabilities

The version of Microsoft FrontPage running on the remote host has the following vulnerabilities in '/vtibin/vtiaut/dvwssr.dll' : - A security bypass vulnerability that allows anyone with web authoring permissions to alter other users' files. - A remote buffer overflow vulnerability that could all...

MS00-013: Microsoft Windows Media Server Malformed Handshake Sequence DoS (253943) (intrusive check)

It was possible to crash the remote Microsoft Media Server by sending it specially crafted packets. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10289; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/15 20:50:29"; scriptcveid"CVE-2000-0211"; scriptbugtraqid1000;...

Qpopper < 3.0.2 LIST Command Local Overflow

There is a vulnerability in the Qpopper 3.0b package that allows users with a valid account to gain a shell on the system C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10197; scriptversion"1.31"; scriptcvsdate"Date: 2018/07/25 18:58:04"; scriptcveid"CVE-2000-0096";...

RealServer Long ramgen Request Remote DoS

It was possible to crash the remote Real Server by sending the request : GET /ramgen/AAAAA...AAA HTTP/1.1 An attacker may use this flaw to prevent this system from serving Real Audio or Video content to legitimate clients. C Tenable Network Security, Inc. Original exploit code : see...

CMail MAIL FROM Command Remote Overflow

The remote host appears to be running a vulnerable version of CMail. Issuing a long argument to the 'MAIL FROM' command can result in a buffer overflow. An attack would look something similar to : MAIL FROM: [email protected] Where AAA...AAA contains more than 8000 'A's. A remote attacker coul...

AIX FTPd libc Library Remote Buffer Overflow

It was possible to crash the remote FTP server by issuing the command : CEL aaaa...aaaa This problem is known as the 'AIX FTPd' overflow and may allow the remote user to easily gain access to the root super-user account on the remote system. C Tenable Network Security, Inc. include"compat.inc"; i...

Netscape Enterprise Server Accept Header Remote Overflow

The remote web server seems to crash when it is issued a too long argument to the 'Accept:' command : Example : GET / HTTP/1.0 Accept: /gif This may allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10154...

ProFTPD mkdir Buffer Overflow

It is possible to crash the remote FTP service by creating a large number of nested directories with names no longer than 255 chars. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...

IMail IMonitor Service Remote Overflow

The remote host appears to be running IMail IMAP server.The installed version is reportedly affected by a buffer overflow vulnerability in the IMonitor. An attacker could exploit this flaw in order to cause a denial of service or potentially execute arbitrary code subject to the privileges of the...

iParty Client Extended Character Handling Remote Overflow DoS

iParty is an audio/text chat program for Windows. The iParty server listens on port 6004 for client requests. If someone connects to it and sends a large amount of ASCII 255 chars, the server will close itself and disconnect all the current users. C Tenable Network Security, Inc...