[EXPL] Hummingbird's Exceed X Emulator Fonts Directive Mishandling

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...

Hummingbird Exceed X buffer overflow

Buffer overflow on oversized font name...

CVE-1999-1280

In CVE-1999-1280, Hummingbird Exceed 6.0.1.0 includes a development/testing DLL that logs user names and passwords in cleartext in the test.log file. The issue affects the DLL usage within Exceed; the precise vulnerable surface is the development/testing DLL component. Documented impact indicates...

CVE-1999-1196

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

CVE-1999-1280

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...

CVE-1999-1196

CVE-1999-1196 affects Hummingbird Exceed X version 5. Remote denial of service can be triggered by malformed data sent to port 6000. This is documented across multiple sources (NVD/NIST and CVE list). The connected OpenVAS/Nessus entries reiterate a remote crash/vector via arbitrary data, but do ...

CVE-1999-1280: Undefined Security Weakness

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...

CVE-1999-1196: Undefined Security Weakness

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

nt+exceed.DoS.txt

Date: Tue, 27 Apr 1999 13:29:26 -0700 From: "LaFournaise, Chris J." To: [email protected] Subject: NT/Exceed D.O.S. This is regarding Hummingbird's Exceed X emulator v5 and possibly v6 running on Windows NT. I haven't tested Win95/98. The Exceed X server allows inbound TCP connections on port...

CVE-1999-1196

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000...

CVE-1999-1280

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...