Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure

The version of FrontPage Extensions running on the remote host has an information disclosure vulnerability. Using a non-existent file as an argument to the 'shtml.exe' CGI reveals the local absolute path of the web root. A remote attacker could use this information to mount further attacks. C...

Microsoft FrontPage dvwssr.dll Multiple Vulnerabilities

The version of Microsoft FrontPage running on the remote host has the following vulnerabilities in '/vtibin/vtiaut/dvwssr.dll' : - A security bypass vulnerability that allows anyone with web authoring permissions to alter other users' files. - A remote buffer overflow vulnerability that could all...

MS00-013: Microsoft Windows Media Server Malformed Handshake Sequence DoS (253943) (intrusive check)

It was possible to crash the remote Microsoft Media Server by sending it specially crafted packets. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10289; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/15 20:50:29"; scriptcveid"CVE-2000-0211"; scriptbugtraqid1000;...

Qpopper < 3.0.2 LIST Command Local Overflow

There is a vulnerability in the Qpopper 3.0b package that allows users with a valid account to gain a shell on the system C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10197; scriptversion"1.31"; scriptcvsdate"Date: 2018/07/25 18:58:04"; scriptcveid"CVE-2000-0096";...

RealServer Long ramgen Request Remote DoS

It was possible to crash the remote Real Server by sending the request : GET /ramgen/AAAAA...AAA HTTP/1.1 An attacker may use this flaw to prevent this system from serving Real Audio or Video content to legitimate clients. C Tenable Network Security, Inc. Original exploit code : see...

CMail MAIL FROM Command Remote Overflow

The remote host appears to be running a vulnerable version of CMail. Issuing a long argument to the 'MAIL FROM' command can result in a buffer overflow. An attack would look something similar to : MAIL FROM: [email protected] Where AAA...AAA contains more than 8000 'A's. A remote attacker coul...

AIX FTPd libc Library Remote Buffer Overflow

It was possible to crash the remote FTP server by issuing the command : CEL aaaa...aaaa This problem is known as the 'AIX FTPd' overflow and may allow the remote user to easily gain access to the root super-user account on the remote system. C Tenable Network Security, Inc. include"compat.inc"; i...

Netscape Enterprise Server Accept Header Remote Overflow

The remote web server seems to crash when it is issued a too long argument to the 'Accept:' command : Example : GET / HTTP/1.0 Accept: /gif This may allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10154...

ProFTPD mkdir Buffer Overflow

It is possible to crash the remote FTP service by creating a large number of nested directories with names no longer than 255 chars. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...

iParty Client Extended Character Handling Remote Overflow DoS

iParty is an audio/text chat program for Windows. The iParty server listens on port 6004 for client requests. If someone connects to it and sends a large amount of ASCII 255 chars, the server will close itself and disconnect all the current users. C Tenable Network Security, Inc...

IMail IMonitor Service Remote Overflow

The remote host appears to be running IMail IMAP server.The installed version is reportedly affected by a buffer overflow vulnerability in the IMonitor. An attacker could exploit this flaw in order to cause a denial of service or potentially execute arbitrary code subject to the privileges of the...