3033 matches found
N/X Web Content Management System 2002 Prerelease 1 - 'datasets.php?c_path' Local File Inclusion
source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously created file, located on an...
N/X Web Content Management System 2002 Prerelease 1 - 'menu.inc.php?c_path' Remote File Inclusion
source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously created file, located on an...
CVE-2002-1740
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name NewFolder parameter...
CVE-2002-1739
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords...
CVE-2002-1741
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." dot dot in the Attachments parameter...
MDaemon SMTP/POP/IMAP server DoS
Product: MDaemon SMTP/POP/IMAP server Authors: Alt-N Technologies Ltd www.mdaemon.com Vulnerable versions: v.6.0.7 and bellow Vulnerability: buffer overflow Bug&exploit by D4rkGr3y www.dhgroup.org Overview-------------------------------------------------------------- From MDaemon's help file:...
PHPNuke 5 Cross Scripting
This is a forward of frog-m@n posting to Vuln-Dev. Here a few holes that i've found in PHPNuke. 5 "Cross Site Scripting". http://phpnuke.org/modules.php? name=Downloads&dop=viewdownloaddetails&lid=0 2&ttitle=JAVASCRIPT http://phpnuke.org/modules.php? name=Downloads&dop=ratedownload&lid=118&ttitle...
CVE-1999-1075
inetd in AIX 4.1.5 assigns a dynamic port N for ttdbserver but also listens on port N-1 and does not pass control to ttdbserver. This enables a denial of service via a flood of connections to N-1 that are not properly closed by inetd. No exploits or remediation are provided in the supplied docume...
CVE-2001-0583
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device such as GET /aux to 1 the Worldclient service at port 3000, or 2 the Webconfig service at port 3001...
CVE-2001-0584
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...
CVE-2001-0583
CVE-2001-0583 affects Alt-N Technologies MDaemon 3.5.4. A remote attacker can cause a denial of service by issuing a request to a MS-DOS device endpoint (e.g., GET /aux) on the Worldclient service (port 3000) or the Webconfig service (port 3001). The available documents do not provide remediation...
Session hijacking in Alt-N's MDaemon 2.8
Hi, Here's a bugreport and a fix for MDaemon 2.8. Problem: It is possible to hijack an HTTP session from MDaemon / WorldClient Standard version 2.8 Description: MDaemon 2.8 comes with WorldClient Standard which allows you to read your mail using a browser. When you receive an HTML formatted page...
Alt-N MDaemon 2.8.5 - UIDL Denial of Service
Alt-N MDaemon 2.8.5 - UIDL Denial of Service source: https://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done...
Alt-N MDaemon 2.8.5 - UIDL Denial of Service
source: https://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done before the user is presented with the POP3...
Alt-N MDaemon 3.1.1 - Denial of Service
source: https://www.securityfocus.com/bid/1689/info Alt-N MDaemon 3.1.1 is subject to a denial of service. If a remote user requests a specially crafted URL to the web services within MDaemon the service will crash. A restart of the service is required in order to gain normal functionality...
nbase.txt
The Telecom Security Group http://www.ttsg.com/TTSG/ TTSG VULNERABILITY ADVISORY Summary: Date: July 20, 1998 Subject: N-Base vulnerability Contact Address: [email protected] Result: Comprimise security of switch, or render inoperable...
Alt-N MDaemon Server 2.71 SP1 - SMTP HELO Argument Buffer Overflow
// source: https://www.securityfocus.com/bid/8622/info It has been reported that Alt-N MDaemon server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command...
Alt-N MDaemon Server 2.71 SP1 - SMTP HELO Argument Buffer Overflow
Alt-N MDaemon Server 2.71 SP1 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8622/info It has been reported that Alt-N MDaemon server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient...
