Gast Arbeiter Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - ------------------------------------------------------------ NATOK security labs natok at hush.com October 20st, 2003 Privilege Escalation - - - ------------------------------------------------------------ - - - Overview Software : Gast Arbeiter...

Buffer Overflow in AOL Instant Messager

DigitalPranksters Security Advisory http://www.DigitalPranksters.com AIM POP POP - Buffer Overflow in AOL Instant Messager's screenname parameter of getfile Risk: Medium Product: AIM 5.2.3292 for Windows Maybe others we only tested the latest version Product URL: http://www.aim.com Vendor...

AOL Instant Messanger buffer overflow

Buffer overflow in screenname parameter during aim: URL parsing...

AOL Instant Messenger (AIM) Software Detection (credentialed check)

The remote host is running AOL Instant Messenger AIM. AIM is a commonly used chat client. This script was written by Jeff Adams Changes made by Tenable - Updated description - Added Synopsis/Solution/See also - Revise title 10/9/09 - Title touch-up 10/28/09 - Added CPE 08/13/12 include"compat.inc...

EveryBuddy 0.4.3 - Long Message Denial of Service

EveryBuddy 0.4.3 - Long Message Denial of Service source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may ...

EveryBuddy 0.4.3 - Long Message Denial of Service

source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may be due to a buffer overflow, though this has not...

Important: Red Hat Security Advisory: : : : Updated gaim client fixes vulnerabilities

Updated gaim packages that fix a number of vulnerabilities are now available for Red Hat Linux on IBM iSeries and pSeries systems. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prior to...

CVE-2003-0217

Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...

ttCMS 2.22.3 ttForum 1.1 - index.php Instant-Messages Preferences SQL Injection

ttCMS 2.22.3 ttForum 1.1 - index.php Instant-Messages Preferences SQL Injection source: https://www.securityfocus.com/bid/7634/info A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks. It has been reported that a problem exists in the...

ttCMS 2.2/2.3 / ttForum 1.1 - 'index.php' Instant-Messages Preferences SQL Injection

source: https://www.securityfocus.com/bid/7634/info A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks. It has been reported that a problem exists in the Instant-Messages script distributed as part of the software. Due to insufficient sanitizing ...

CVE-2003-0217

Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...

CVE-2003-0169

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service CPU consumption via a request to hpnst.exe that calls itself, which causes an infinite loop...

HP Instant TopTools hpnst.exe CGI DoS

The remote host has the CGI 'hpnst.exe' installed. Older versions of this CGI pre 5.55 are vulnerable to a denial of service attack where the user can make the CGI request itself. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-2002-0490

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to 1 execute arbitrary POP commands via the id parameter in message.php, or 2 modify certain mail message headers via numerous parameters in write.php...

CVE-2002-0785

AOL Instant Messenger AIM allows remote attackers to cause a denial of service crash via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow...

CVE-2002-0490

Technical details (affected component, vulnerable version, exploit specifics and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0785

AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...

CVE-2003-0169

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service CPU consumption via a request to hpnst.exe that calls itself, which causes an infinite loop...

CVE-2003-0169

CVE-2003-0169 affects the GoAhead-Webs component used by HP Instant TopTools prior to version 5.55. Affected CGI hpnst.exe can cause a denial of service by looping when it calls itself, leading to CPU consumption and system instability. The vulnerability arises from an infinite loop triggered by ...

DDI1012.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Digital Defense Inc. Security Advisory DDI-1012 [email protected] http://www.digitaldefense.net/ -...