HP OpenView Network Node Manager (OV NNM) 7.5.1 - 'OVAS.exe' Overflow (SEH)

!/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug This vulnerability was found, analysed and exploited as...

CVE-2008-1337

CVE-2008-1337 affects Timbuktu Pro 8.6.5 RC 229 for Windows, where the instant message service is vulnerable to remote DoS. An attacker can trigger a daemon crash by sending an invalid Version field, or cause CPU exhaustion and daemon termination via an invalid or partial message. The issue is do...

Directory traversal

Directory traversal vulnerability in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. dot dot in the recipient field...

Format string

Format string vulnerability in the logging function in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service daemon crash and possibly have unspecified other impact via format string specifiers in ...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

Design/Logic Flaw

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0944

Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier is vulnerable to a remote denial of service (NULL dereference and application crash) caused by a version field containing zero. No remediation or exploit details are provided in the documents. If exploitable vectors or fixes exist, they are not ...

CVE-2008-0945

The CVE-2008-0945 entry concerns Ipswitch Instant Messaging (IM) Server (IMserve/IMserver) 2.0.8.1 and earlier. A format string vulnerability exists in the server’s logging function, allowing remote authenticated users to trigger a denial of service (daemon crash) and possibly other unspecified i...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0945

Format string vulnerability in the logging function in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service daemon crash and possibly have unspecified other impact via format string specifiers in ...

Zilab Chat and Instant Messaging (ZIM) 2.02.1 Server - Multiple Vulnerabilities

Zilab Chat and Instant Messaging ZIM 2.02.1 Server - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploi...

Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 Server - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploit may allow remote attackers to execute arbitrary code in the context of the...

Ipswitch Instant Messaging multiple security vulnerabilities

Format string vulnerability, multiple DoS conditions...

Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1

Luigi Auriemma Application: Ipswitch Instant Messaging http://www.ipswitch.com/products/instantmessaging Versions: = 2.0.8.1 Platforms: Windows Bugs: A pre-auth NULL pointer crash in decryption function B format string in logging C arbitrary empty files creation Exploitation: remote A versus both...

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows...

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite arbitrary files. Attackers can exploit...

Debian Security Advisory DSA 1433-1 (centericq)

The remote host is missing an update to centericq announced via advisory DSA 1433-1. OpenVAS Vulnerability Test $Id: deb14331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1433-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 414-1 (jabber)

The remote host is missing an update to jabber announced via advisory DSA 414-1. OpenVAS Vulnerability Test $Id: deb4141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 414-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-912-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...