2190 matches found
CVE-2000-0592: Undefined Security Weakness
Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands...
Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies
Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user...
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service
source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user, including an 'anonymous' user...
CVE-1999-0759
Buffer overflow in FuseMAIL POP service via long USER and PASS commands...
War-FTPD 1.65 Password Overflow
This exploits the buffer overflow found in the PASS command in War-FTPD 1.65. This particular module will only work reliably against Windows 2000 targets. The server must be configured to allow anonymous logins for this exploit to succeed. A failed attempt will bring down the service completely...
Microsoft Windows NT 4.0 SP5 / Terminal Server 4.0 - 'Pass the Hash' with Modified SMB Client
source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need for the user to "decrypt" the...
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the...