H. Nomura Tiny FTPDaemon 0.52 - Multiple Buffer Overflow Vulnerabilities

H. Nomura Tiny FTPDaemon 0.52 - Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/961/info Tiny FTPd is a freeware FTP server for Win9x with a Japanese interface. Version .52 and possible previous versions have unchecked buffers in the code that handles the...

CVE-1999-0811

Buffer overflow in Samba smbd program via a malformed message command...

CVE-1999-0751

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch...

CVE-1999-0914

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package...

Mini SQL CGI content-length Field Remote Overflow

The mini-sql program comes with the w3-msql CGI which is vulnerable to a buffer overflow. An attacker may use it to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10296; scriptversion"1.40"; scriptcveid"CVE-2000-0012"...

Rover POP3 Server Username Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long user name 10,000 chars This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10206; scriptversion...

CSM Mail Server MTA 'HELO' DoS

The remote SMTP server is vulnerable to a buffer overflow attack. This issue is triggered by issuing the 'HELO' command followed by a long argument. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ...

camshot.overflow.txt

---------- Forwarded message ---------- From: "Ussr Labs" To: "TECHNOTRONIC" Subject: Local / Remote GET Buffer Overflow Vulnerability in CamShot WebC= am HTTP Server v2.5 for Win9x/NT Date: Thu, 30 Dec 1999 14:04:14 -0300 Local / Remote GET Buffer Overflow Vulnerability in CamShot WebCam HTTP...

norton.2000.txt

This was going to be w00giving 11 w00giving 10 will be posted within the next few days. Anyway, this allows EIP to be overwritten with 265+ bytes, which person who posted this vulnerability failed to mention or failed to notice. It's unclear if he labeled it as a DoS because he didn't realize it...

RSA Security RSAREF 2.0 - Local Buffer Overflow

RSA Security RSAREF 2.0 - Local Buffer Overflow source: https://www.securityfocus.com/bid/843/info A buffer overflow vulnerability exists in the RSAREF cryptographic library which may possibly make any software using the library vulnerable. The vulnerability exists in four functions in the rsa.c...

FreeBSD 3.3 - 'gdc' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The overflow occurs when the argument passed...

Qualcomm qpopper 3.03.0 b20 - Remote Buffer Overflow (1)

Qualcomm qpopper 3.03.0 b20 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/830/info There is a buffer overflow vulnerability present in current 3.x versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the ho...

Qualcomm qpopper 3.0/3.0 b20 - Remote Buffer Overflow (2)

source: https://www.securityfocus.com/bid/830/info There is a buffer overflow vulnerability present in current 3.x versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the host running qpopper can be completely compromised...

CVE-1999-1190

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...

International TeleCommunications WebBBS 2.13 - login Password Buffer Overflow

International TeleCommunications WebBBS 2.13 - login Password Buffer Overflow // source: https://www.securityfocus.com/bid/803/info Certain versions of WebBBS by Mike Bryeans of International TeleCommunications contain a flaw in the initial login program. User supplied data via the login name and...

Antelope Software W4-Server 2.6 aWin32 - Cgitest.exe Remote Buffer Overflow

Antelope Software W4-Server 2.6 aWin32 - Cgitest.exe Remote Buffer Overflow // source: https://www.securityfocus.com/bid/802/info Certain versions of the W4-Server 32-bits personal webserver by Antelope Software ship with a flawed script, Cgitest.exe. This compiled CGI script fails to perform...

DeleGate Multiple Function Remote Overflows

The version of the DeleGate proxy server has a remote buffer overflow vulnerability. This issue can be triggered by issuing the following command : whois://a b 1 AAAA..AAAAA A remote attacker could exploit this issue to cause a denial of or execute arbitrary code. There are reportedly hundreds of...

NetCPlus SmartServer3 POP3 (NCPOPSERV.EXE) USER Command Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long command. This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: doma...

IrfanView32 3.0.7 - Image File Buffer Overflow

IrfanView32 3.0.7 - Image File Buffer Overflow // source: https://www.securityfocus.com/bid/781/info IrfanView32, a freeware image viewer, has a problem in the handling of Adobe Photoshop generated jpegs. If a .jpg file is opened for viewing that contains the Adobe Photoshop marker in the header...

irfan.view32.txt

The popular Image viewer "Irfan View32" contains the buffer overflow problem, this problem exists in the handling of Adobe Photoshop image file. Irfan view checks the image type by the image header, if "8BPS" pattern is found in the header, Irfan view judges this file as Photo Shop image. We thin...