Microsoft Windows NNTP Service (XPAT) - Denial of Service (MS04-036)

Microsoft Windows NNTP Service XPAT - Denial of Service MS04-036 -- IIS NNTP Service XPAT command heap overflow proof of concept Author: Lucas Lavarello lucas at coresecurity dot com Juliano Rizzo juliano at coresecurity dot com Copyright c 2001-2004 CORE Security Technologies, CORE SDI Inc. All...

MS Windows NNTP Service (XPAT) Denial of Service Exploit (MS04-036)

Exploit for unknown platform in category dos / poc =================================================================== MS Windows NNTP Service XPAT Denial of Service Exploit MS04-036 =================================================================== -- IIS NNTP Service XPAT command heap overflow...

Microsoft Windows NNTP Service (XPAT) - Denial of Service (MS04-036)

-- IIS NNTP Service XPAT command heap overflow proof of concept Author: Lucas Lavarello lucas at coresecurity dot com Juliano Rizzo juliano at coresecurity dot com Copyright c 2001-2004 CORE Security Technologies, CORE SDI Inc. All rights reserved. THIS SOFTWARE IS PROVIDED AS IS'' AND ANY EXPRES...

Microsoft Security Bulletin MS04-036 Vulnerability in NNTP Could Allow Remote Code Execution (883935)

Microsoft Security Bulletin MS04-036 Vulnerability in NNTP Could Allow Remote Code Execution 883935 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Exchange Server Impact of Vulnerability: Remote Code Execution Maximum...

Microsoft NNTP code execution

Multiple bugs during XPAT command parsing...

CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities

Core Security Technologies Advisory http://www.coresecurity.com IIS NNTP Service XPAT Command Vulnerabilities Date Published: 2004-10-12 Last Update: 2004-10-12 Advisory ID: CORE-2004-0802 Bugtraq ID: Not assigned CVE Name: CAN-2004-0574 Title: IIS NNTP Service XPAT Command Vulnerabilities Class:...

Microsoft NNTP Component Remote Overflow (883935)

Binary data 2359.prm...

IIS NNTP Service XPAT Command Vulnerabilities

Advisory ID Internal CORE-2004-0802 Core Security Advisory https://www.coresecurity.com Date Published: 2004-10-12 Last Update: 2004-10-12 Advisory ID: CORE-2004-0802 Bugtraq ID: Not assigned CVE Name: CAN-2004-0574 Title: IIS NNTP Service XPAT Command Vulnerabilities Class: Boundary error...

Microsoft NNTP Component Remote Overflow (883935)

Binary data 2360.prm...

Microsoft NNTP Component Heap Overflow Vulnerability

Description The Microsoft Network News Transfer Protocol NNTP Component is prone to a buffer overflow condition. Successful exploitation of this vulnerability could allow remote code execution in the context of the process accessing the vulnerable component. Technologies Affected Avaya DefinityOn...

MS04-036: Microsoft NNTP Component Remote Overflow (883935) (uncredentialed check)

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue. An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process. C Tenable Network Security, Inc. include"compat.inc"; if...

NNTP Server Type and Version

Binary data 1888.prm...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

CVE-2003-0744 affects the leafnode NNTP client’s fetchnews component, specifically versions 1.9.3 through 1.9.41. The underlying issue is triggered by certain malformed Usenet articles that cause fetchnews to hang while waiting for input, leading to a denial of service (process hang and terminati...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

EType EServ 1.9x - NNTP Remote Denial of Service

source: https://www.securityfocus.com/bid/6522/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user sends a large amount of data via...

EType EServ 1.9x - NNTP Remote Denial of Service

EType EServ 1.9x - NNTP Remote Denial of Service source: https://www.securityfocus.com/bid/6522/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When ...

CVE-2002-1789

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function...

leafnode denial-of-service triggered by article request

The leafnode NNTP server may go into an unterminated loop with 100% CPU use when an article is requested by Message-ID that has been crossposted to several news groups when one of the group names is the prefix of another group name that the article was cross-posted to. Found by Jan Knutar...