CVE-2001-0207

CVE-2001-0207: A buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname that is copied into a small buffer after a reverse DNS lookup (gethostbyaddr). Affected software is bing; the underlying cause is unsafe handling of hostname data leading to potentia...

DCE Services Enumeration

By sending a Lookup request to the portmapper TCP 135 or epmapper PIPE it was possible to enumerate the Distributed Computing Environment DCE services running on the remote port. Using this information it is possible to connect and bind to each service by sending an RPC request to the remote...

CVE-2001-0207

Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

CVE-2001-0029

CVE-2001-0029 affects the ooops WWW proxy server (v1.4.6 and possibly earlier). The vulnerability is a buffer overflow in handling host/domain names obtained from reverse DNS lookups, enabling a remote attacker to execute arbitrary commands. The CVSS/impact metrics show a base score of 10.0 (HIGH...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

Переполнение буфера в NIS (hostname lookup)

При ответе сервера не проверяется длина адреса, что позволяет переполнить статический буфер...

Security Advisory 2000-012

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-012 ================================= Topic: buffer overflow in NIS hostname lookup code Version: 1.4.x: All versions prior to 1.4.3 fix will be in 1.4.3 1.5ALPHA: prior to June 30, 2000 fix will be in 1.5 current: prior to June 30,...

CVE-1999-0983

The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...

CVE-1999-0983

Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...

PT-1999-1503 · Internic · Whois Internic Lookup

Name of the Vulnerable Software and Affected Versions: Whois Internic Lookup program affected versions not specified Description: The issue allows remote attackers to execute commands via shell metacharacters in the domain entry. This can be exploited by injecting malicious input into the domain...

CVE-1999-0023

Local user gains root privileges via buffer overflow in rdist, via lookup function...

CVE-1999-0023

Local user gains root privileges via buffer overflow in rdist, via lookup function...

PT-1996-1002 · Rdist · Rdist

Name of the Vulnerable Software and Affected Versions: rdist affected versions not specified Description: A local user can gain root privileges due to a buffer overflow in the lookup function of rdist. Recommendations: At the moment, there is no information about a newer version that contains a f...