nCipher netHSM information leak

Pass phrases entered by means of the nCipher netHSM front panel, either using the built in thumbwheel or using a directly attached keyboard, are exposed in the netHSM system log...

nCipher Advisory #10: Pass phrases are exposed in netHSM log files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 nCipher Security Advisory No. 10 Pass phrases are exposed in netHSM log files -------------------------------------------- SUMMARY ======= Pass phrases entered by means of the nCipher netHSM front panel, either using the built in thumbwheel or using a...

ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issu...

Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow

Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable softwar...

Xlight FTP Server 1.25/1.41 - 'PASS' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents itself when an attacker sends a...

CVE-2003-0766: Undefined Security Weakness

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via 1 a long FTP banner, 2 a long response to a USER command, or 3 a long response to a PASS command...

CVE-2003-0561: Undefined Security Weakness

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via 1 a long FTP banner, or long responses to the client commands 2 USER, 3 PASS, 4 ACCT, and possibly other commands...

CVE-2003-0391: Undefined Security Weakness

Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the PASS command...

CVE-2002-0741: Undefined Security Weakness

psyBNC 2.3 allows remote attackers to cause a denial of service CPU consumption and resource exhaustion by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC...

Buffer overflow in MatuFtpServer

Buffer overflow in PASS command...

CVE-2002-0126: Undefined Security Weakness

Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to 1 USER, 2 PASS, or 3 CWD...

CVE-2000-0699: Undefined Security Weakness

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command...

CVE-2001-0826: Undefined Security Weakness

Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to 1 HELP, 2 USER, 3 PASS, 4 PORT, 5 DELE, 6 REST, 7 RMD, or 8 MKD...

Lotus Domino View ACL by-pass (#NISR29102001C)

NGSSoftware Insight Security Research Advisory Name: Lotus Domino View ACL by-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Possibly high Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Advisory number:...

CVE-1999-1445: Undefined Security Weakness

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...

CVE-2000-1035: Undefined Security Weakness

Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command...

CVE-1999-0759

The CVE-1999-0759 entry concerns FuseMAIL POP service vulnerable to a buffer overflow triggered by long USER and PASS commands. Connected sources confirm the affected component (FuseMAIL POP service) and the root cause (buffer overflow) with CVSS details indicating a high-severity, network-expose...

CVE-1999-0759

Buffer overflow in FuseMAIL POP service via long USER and PASS commands...

CVE-1999-0759: Undefined Security Weakness

Buffer overflow in FuseMAIL POP service via long USER and PASS commands...

HP-UX FTP Daemon PASS Command Remote Format String

The remote ftp server does not sanitize properly the argument of the PASS command it receives for anonymous accesses. It may be possible for a remote attacker to gain shell access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...