Very interesting traceroute flaw

Hi, CREDIT ====== I'm starting with a credit section because I did not discover this flaw. The flaw was discovered by Pekka Savola [email protected], who noted that traceroute could be caused to crash, which is pretty suboptimal behaviour for a suid-root program :- I took this forward and specula...

siemens.ipphone.txt

From: Michal Zalewski Subject: Another thingy. To: [email protected] -- Standard disclaimer applies. I am speaking as a private person, -- and doing it in completely informal way, which shouldn't be interpreted -- in any other way but as my personal opinions and beliefs, which don't have ...

adv_telnet1.txt

/\ /\ /\ \ \ / //\ /:\ /\ /\ /\ \ \ \ | / / : / . \ . | | . \ \ / . \ / : \ / . . \ \ . | / \ | / / \ / \ . | | . \ /. \ : : //\ / \ / \ \ | / | / / / / / / / / / ---------------------------------------------------Meliksah Ozoral E-mail...

Ports Security Advisory: FreeBSD-SA-00:43.brouted

Topic: brouted port allows gid kmem compromise Category: ports Module: brouted Announced: 2000-08-28 Credits: Discovered during internal auditing Affects: Ports collection prior to the correction date. Corrected: 2000-08-22 Vendor status: Contacted FreeBSD only: NO I. Background brouted is a...

PragmaSys TelnetServer 2000 - rexec Buffer Overflow

PragmaSys TelnetServer 2000 - rexec Buffer Overflow source: https://www.securityfocus.com/bid/1605/info Pragma Systems offers a windows remote access server called TelnetServer 2000. TelnetServer crashes if more than 1000 NULL characters are sent to its rexec port, 512. This can be executed by an...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

Exploit for Totalbill...

Totalbill is a complete billing and provisioning system for ISPs, and it's written by Aptis Software www.aptissoftware.com. There is one part of it that sits on your mail and radius servers called Sysgen that listens on a port sometimes 9998, but it usually varies, and it allows the incoming...

MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1568/info Mediahouse Statistics Server LiveStats is susceptible to a buffer overflow attack if a URL in a GET request contains over 2030 bytes. Depending on the data inserted into the request, the application will crash or can be forced to execute arbitra...

NAI Net Tools PKI Server 1.0 - 'strong.exe' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1536/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a buffer overflow vulnerability which could lead to a remote compromise of the system running the PKI server. The problem lies within the...

CVE-2000-0656

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol...

Buffer Overflow in MS Outlook Email Clients

Security Advisory: Buffer Overflow in MS Outlook & Outlook Express Email Clients Date: 18th July 2000 Author: Aaron Drew mailto:[email protected] Versions Affected: MS Outlook 97/2000 and MS Outlook Express 4/5 A bug in a shared component of Microsoft Outlook and Outlook Express mai...

Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow (1)

Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow 1 source: https://www.securityfocus.com/bid/1481/info All versions of Microsoft Outlook and Outlook Express are vulnerable to buffer overflow attacks where a remote user is capable of executing arbitrary code on an emai...

GAMSoft TelSrv 1.4/1.5 Username Overflow DoS

It is possible to crash the remote telnet server by sending a username that is 4550 characters or longer. A remote attacker could exploit this to crash the service, or potentially execute arbitrary code. This script was written by Prizm See the Nessus Scripts License for details Changes by Tenabl...

West Street Software LocalWEB HTTP Server 1.2 - Buffer Overflow

source: https://www.securityfocus.com/bid/1423/info LocalWEB is a freeware HTTP server for the Windows suite of operating systems. Certain versions of this software are vulnerable to a remotely exploitable buffer overflow attack. This attack can instrumented by sending the web server via port 80 ...

Michael Lamont Savant Web Server 2.13.0 - Remote Buffer Overflow

Michael Lamont Savant Web Server 2.13.0 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1453/info A buffer overflow exists in the Savant Web Server. It is possible to exploit this overflow by sending an unusually long GET request to the server. / The MDMA Crew's proof-of-concep...

Michael Lamont Savant Web Server 2.1/3.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1453/info A buffer overflow exists in the Savant Web Server. It is possible to exploit this overflow by sending an unusually long GET request to the server. / The MDMA Crew's proof-of-concept code for the buffer overflow in Savant Written by Wizdumb The...

Dragon FTP USER Command Remote Overflow

It was possible to crash the remote FTP server by issuing a USER command followed by a very long argument over 16,000 characters. This is likely due to a remote buffer overflow vulnerability. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable...

Re: rh 6.2 - gid compromises, etc

slrnpull setgid: news - using eg. NNTPSERVER environmental variable, you can cause nice SEGV... egid==news, of course. On systems running innd server and probably other newsservers as well, group 'news' can be used to control content of whole spool, and to elevate privledges, gaining euid news...

Переполнение буфера в Dmailweb

Переполнение буфера позволяет удаленно выполнить код в контексте сервера...

Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability USSR Advisory Code: USSR-2000047 Release Date: June 16, 2000 Systems Affected: Small HTTP Server ver. 1.212 maybe others THE PROBLEM The Ussr Labs team has recently discovered a buffer...