351 matches found
[SA14092] Newspost "socket_getline()" Buffer Overflow Vulnerability
TITLE: Newspost "socketgetline" Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA14092 VERIFY ADVISORY: http://secunia.com/advisories/14092/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: Newspost 2.x http://secunia.com/product/4589/ DESCRIPTION: Niels Heinen has...
CVE-2005-0101
Buffer overflow in the socketgetline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character...
CVE-2005-0101
Buffer overflow in the socketgetline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character...
Newspost 2.0/2.1 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12418/info Newspost is prone to a remote buffer overflow vulnerability due to an unbounded memory copy operation. The problem occurs in the 'socketgetline' function of 'socket.c' when the vulnerable client handles NNTP server responses. Successful...
CVE-2005-0132: newsfetch NNTP responses buffer overflow
Affected software: newsfetch (FreeBSD ports). Vulnerability: buffer overflow in handling NNTP server responses due to using sscanf without proper bounds checking, enabling overflow on long LIST responses. Impact (as stated): crash or potential arbitrary code execution on the system. Exploitation ...
Newspost 2.02.1 - Remote Buffer Overflow
Newspost 2.02.1 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/12418/info Newspost is prone to a remote buffer overflow vulnerability due to an unbounded memory copy operation. The problem occurs in the 'socketgetline' function of 'socket.c' when the vulnerable client handles...
Mozilla nsNNTPProtocol.cpp NNTP news:// URI Handling Overflow DoS
The remote version of Mozilla is vulnerable to a heap overflow attack against its NNTP functionality. This may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue news site and lure a victim on the remote host into reading...
isec-0020-mozilla.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Heap overflow in Mozilla Browser Date: Dec 29, 2004 Issue: ====== A critical security vulnerability has been found in Mozilla Project code handling NNTP protocol. Details: ======== Mozilla browser supports NNTP urls. Remote side is able to...
CVE-2004-1316
Heap-based buffer overflow in MSGUnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service application crash via an NNTP URL news: with a trailing '' backslash character, which prevents a string from being NULL terminated...
CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...
Mozilla Browser <= 1.7.3 NNTP Code Heap Overflow (PoC)
Exploit for unknown platform in category dos / poc ====================================================== Mozilla Browser i = "news://news.individual.net/AAAAAAAAAAAAAA?"; forl = 0; l 0day.today 2018-02-09...
Mozilla Firefox < 1.7.5 NNTP Remote Heap Overflow
Binary data 2481.prm...
Heap overflow in Mozilla Browser <= 1.7.3 NNTP code.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Heap overflow in Mozilla Browser = 1.7.3 NNTP code. Product: Mozilla Browser Version: = 1.7.3 Vendor: http://www.mozilla.org/ URL: http://isec.pl/vulnerabilities/isec-0020-mozilla.txt CVE: not assigned Author: Maurycy Prodeus [email protected]...
CVE-2004-1316
Heap-based buffer overflow in MSGUnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service application crash via an NNTP URL news: with a trailing '' backslash character, which prevents a string from being NULL terminated...
mozilla -- heap overflow in NNTP handler
Maurycy Prodeus reports a critical vulnerability in Mozilla-based browsers: Mozilla browser supports NNTP urls. Remote side is able to trigger news:// connection to any server. I found a flaw in NNTP handling code which may cause heap overflow and allow remote attacker to execute arbitrary code o...
Hydra: NNTP
This plugin runs Hydra to find NNTP accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...
CVE-2004-0574
The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...
Microsoft IIS contains vulnerability in NNTP service
Overview A vulnerability in the NNTP component of Microsoft IIS may allow a remote attacker to compromise the affected system. Description The Network News Transport Protocol NNTP is a protocol for the distribution, inquiry, retrieval, and posting of news articles over a network. Microsoft's...
CVE-2004-0574
The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...
CVE-2004-0574
CVE-2004-0574 affects the NNTP component in Windows NT 4.0 Server, Windows 2000 Server, Windows Server 2003, Exchange 2000/2003, enabling remote code execution via XPAT pattern handling. The issue stems from improper length validation and unchecked buffers, leading to off-by-one and heap-based ov...