Pragma Systems InterAccess TelnetD Server 4.0 Build 4 - Buffer Overflow

source: https://www.securityfocus.com/bid/995/info The Pragma Systems InterAccess TelnetID Server 4.0 Build 4 has an unchecked buffer in the code that handles login commands. Arbitrary code is capable of being executed on the InterAccess TelnetD Server if a string of over 300 characters is used a...

xloadimage -- buffer overflow in FACES image handling

In 2001, zen-parse discovered a buffer overflow in xloadimage's FACES image loader. A maliciously crafted image could cause xloadimage to execute arbitrary code. A published exploit exists for this vulnerability. In 2005, Rob Holland discovered that the same vulnerability was present in xli...

CVE-2000-0129

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file...

CVE-1999-0949

Buffer overflow in canuum program for Canna input system allows local users to gain root privileges...

Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service

// source: https://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the server by submitting extremely lo...

H. Nomura Tiny FTPDaemon 0.52 - Multiple Buffer Overflow Vulnerabilities

H. Nomura Tiny FTPDaemon 0.52 - Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/961/info Tiny FTPd is a freeware FTP server for Win9x with a Japanese interface. Version .52 and possible previous versions have unchecked buffers in the code that handles the...

CVE-1999-0811

Buffer overflow in Samba smbd program via a malformed message command...

CVE-1999-0751

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch...

CVE-1999-0914

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package...

Rover POP3 Server Username Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long user name 10,000 chars This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10206; scriptversion...

CSM Mail Server MTA 'HELO' DoS

The remote SMTP server is vulnerable to a buffer overflow attack. This issue is triggered by issuing the 'HELO' command followed by a long argument. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ...

Mini SQL CGI content-length Field Remote Overflow

The mini-sql program comes with the w3-msql CGI which is vulnerable to a buffer overflow. An attacker may use it to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10296; scriptversion"1.40"; scriptcveid"CVE-2000-0012"...

camshot.overflow.txt

---------- Forwarded message ---------- From: "Ussr Labs" To: "TECHNOTRONIC" Subject: Local / Remote GET Buffer Overflow Vulnerability in CamShot WebC= am HTTP Server v2.5 for Win9x/NT Date: Thu, 30 Dec 1999 14:04:14 -0300 Local / Remote GET Buffer Overflow Vulnerability in CamShot WebCam HTTP...

norton.2000.txt

This was going to be w00giving 11 w00giving 10 will be posted within the next few days. Anyway, this allows EIP to be overwritten with 265+ bytes, which person who posted this vulnerability failed to mention or failed to notice. It's unclear if he labeled it as a DoS because he didn't realize it...

RSA Security RSAREF 2.0 - Local Buffer Overflow

RSA Security RSAREF 2.0 - Local Buffer Overflow source: https://www.securityfocus.com/bid/843/info A buffer overflow vulnerability exists in the RSAREF cryptographic library which may possibly make any software using the library vulnerable. The vulnerability exists in four functions in the rsa.c...

FreeBSD 3.3 - 'gdc' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The overflow occurs when the argument passed...

Qualcomm qpopper 3.03.0 b20 - Remote Buffer Overflow (1)

Qualcomm qpopper 3.03.0 b20 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/830/info There is a buffer overflow vulnerability present in current 3.x versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the ho...

Qualcomm qpopper 3.0/3.0 b20 - Remote Buffer Overflow (2)

source: https://www.securityfocus.com/bid/830/info There is a buffer overflow vulnerability present in current 3.x versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the host running qpopper can be completely compromised...

CVE-1999-1190

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...

International TeleCommunications WebBBS 2.13 - login Password Buffer Overflow

International TeleCommunications WebBBS 2.13 - login Password Buffer Overflow // source: https://www.securityfocus.com/bid/803/info Certain versions of WebBBS by Mike Bryeans of International TeleCommunications contain a flaw in the initial login program. User supplied data via the login name and...