FoxWeb 2.5 - PATH_INFO Remote Buffer Overrun

FoxWeb 2.5 - PATHINFO Remote Buffer Overrun source: https://www.securityfocus.com/bid/8547/info FoxWeb is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of user-supplied PATHINFO data to the Foxweb CGI and ISAPI extension. Successful...

FoxWeb 2.5 - PATH_INFO Remote Buffer Overrun

source: https://www.securityfocus.com/bid/8547/info FoxWeb is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of user-supplied PATHINFO data to the Foxweb CGI and ISAPI extension. Successful exploitation would permit a remote attacker to...

Remote Buffer Overrun WebAdmin.exe

NGSSoftware Insight Security Research Advisory Name: Remote System Buffer Overrun WebAdmin.exe Systems Affected: Windows Severity: High Risk Category: Buffer Overrun Vendor URL: http://www.altn.com/ Author: Mark Litchfield [email protected] Date: 24th June 2003 Advisory number: NISR2406-03...

Tripbit Secure Code Analizer 1.0 - 'fgets()' Local Buffer Overrun

// source: https://www.securityfocus.com/bid/8028/info A buffer overrun has been discovered in Tripbit Secure Code Analizer when reading data from source files. The problem occurs due to an insecure use of the fgets function. This vulnerability could be triggered by a malicious source file...

Tripbit Secure Code Analizer 1.0 - fgets() Local Buffer Overrun

Tripbit Secure Code Analizer 1.0 - fgets Local Buffer Overrun // source: https://www.securityfocus.com/bid/8028/info A buffer overrun has been discovered in Tripbit Secure Code Analizer when reading data from source files. The problem occurs due to an insecure use of the fgets function. This...

Alt-N WebAdmin Multiple Vulnerabilities

webadmin.dll was found on the web server. Old versions of this CGI suffered from numerous problems: - installation path disclosure - directory traversal, allowing anybody with administrative permission on WebAdmin to read any file - buffer overflow, allowing anybody to run arbitrary code on the...

Kerio MailServer 5.6.3 list Module - Overflow

Kerio MailServer 5.6.3 list Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs...

Kerio MailServer 5.6.3 subscribe Module - Overflow

Kerio MailServer 5.6.3 subscribe Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely...

Kerio MailServer 5.6.3 add_acl Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 do_map Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 subscribe Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio WebMail < 5.7.7 Multiple Vulnerabilities

The remote host is running version 5 of the Kerio MailServer. There are multiple flaws in this interface that could allow an attacker with a valid webmail account on this host to obtain a shell on this host or to perform a cross-site-scripting attack against this host with a version prior to 5.6....

Dune 0.6.7 - GET Remote Buffer Overrun

Dune 0.6.7 - GET Remote Buffer Overrun // source: https://www.securityfocus.com/bid/7945/info It has been reported that Dune is vulnerable to a remote boundary condition error when handling long requests. This could allow a remote attacker to execute arbitrary code on a vulnerable system. /...

Re: Linux /bin/mail Carbon Copy Field Buffer Overrun Vulnerability

Damage Hacking Group security advisory www.dhgroup.org Linux /bin/mail Carbon Copy Field Buffer Overrun Vulnerability http://www.securityfocus.com/bid/7760 It was noted that vulnerable Linux distribs are RedHat and Slackware. I checked it on my Linux Mandrake 8.2 and it's work: satan@localhost my...

Microsoft Security Bulletin MS03-020: Cumulative Patch for Internet Explorer &#40;818529&#41;

-----BEGIN PGP SIGNED MESSAGE----- - - ------------------------------------------------------------------ Title: Cumulative Patch for Internet Explorer 818529 Date: 04 June 2003 Software: Microsoftr Microsoft Internet Explorerr 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0...

Microsoft Internet Explorer 5 - OBJECT Tag Buffer Overflow

source: https://www.securityfocus.com/bid/7806/info Microsoft Internet Explorer is prone to a boundary condition error when handling OBJECT tags in web pages. When a web page containing an OBJECT tag using a parameter containing excessive data is encountered by a vulnerable client, a internal...

RedHat 9.0 Slackware 8.1 - binmail Carbon Copy Field Buffer Overrun

RedHat 9.0 Slackware 8.1 - binmail Carbon Copy Field Buffer Overrun source: https://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds...

RedHat 9.0 / Slackware 8.1 - '/bin/mail' Carbon Copy Field Buffer Overrun

source: https://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds checking while parsing this information it may be possible to trigger ...

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...

Microsoft SQL Server 7.0/2000 JET Database Engine 4.0 - Buffer Overrun

source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying data supplied via a remote source and is due to insufficient bounds...