FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

IMail IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1256 BID: 13727 OSVDB: 16806 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, and a web interface and web calendaring service. Problem A buffer overflow when processing long mailbox names specified in the STAT...

Apache mod_access rule bypass

The target is running an Apache web server that may not properly handle access controls. In effect, on big-endian 64-bit platforms, Apache fails to match allow or deny rules containing an IP address but not a netmask. OpenVAS has determined the vulnerability exists only by looking at the Server...

PHP.EXE / Apache Win32 Arbitrary File Reading Vulnerability

A configuration vulnerability exists for PHP.EXE cgi running on Apache for Win32 platforms. It is reported that the installation text recommends configuration options in httpd.conf that create a security vulnerability, allowing arbitrary files to be read from the host running PHP. Remote users ca...

Flash FTP Server Directory Traversal Vulnerability

Flash FTP Server easy-to-set-up FTP server for all Windows platforms. Some bugs were found that will allow a malicious user to write and read anywhere on the disk. OpenVAS Vulnerability Test $Id: flashftpserverdirectorytraversal.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Flash FTP Serve...

Microsoft Distributed Transaction Coordinator vulnerable to buffer overflow via specially crafted network message

Overview Microsoft Distributed Transaction Coordinator MSDTC may be vulnerable to a flaw that allows remote unauthenticated attackers to execute arbitrary code. Description The Microsoft Distributed Transaction Coordinator MSDTC is described by Microsoft as "distributed transaction facility for...

Low: Red Hat Bug Fix Advisory: gdb bug fix update

An updated gdb package that fixes various bugs is now available. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages, by executing them in a controlled fashion, and then printing their data. This updated package addresses the following issues: - GDB on ia64...

[SA16897] Linux Kernel "fget()" Potential Denial of Service Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Mozilla BrowserFirefox - Arbitrary Command Execution

Mozilla BrowserFirefox - Arbitrary Command Execution source: https://www.securityfocus.com/bid/14888/info Mozilla Browser/Firefox are affected by an arbitrary command-execution vulnerability. This attack would occur in the context of the user running the vulnerable application and may facilitate...

Multiple Centericq vulnerabilities

Integer signedness errors and integer overflow on different platforms...

32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities

Title: 32919 - Computer Associates Message Queuing CAM/CAFT multiple vulnerabilities CA Vulnerability ID: CAID 32919 Disclosure Date: 2005-08-19 Discovered By: CA internal audit Impact: Remote attackers can execute arbitrary code, or cause a denial of service condition. Summary: During a recent...

CVE-2004-2338

OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions...

Linux kernel ia32 compatibility for 64 bit platforms race condtions

Race conditions with heap memory corruption in execve syscall...

qmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests

Georgi Guninski writes: There are several issues with qmail on 64 bit platforms - classical integer overflow, pointer with signed index and signedness problem not counting the memory consumtion dos, which just helps. Update: the problem with the signed index is exploitable on Freebsd 5.4 amd64 wi...

HP OpenView Radia Management Portal 1.02.0 - Remote Command Execution

HP OpenView Radia Management Portal 1.02.0 - Remote Command Execution source: https://www.securityfocus.com/bid/13414/info A remote command execution vulnerability affects HP OpenView Radia Management Portal. This issue is due to a failure of the application to properly secure access to critical...

HP OpenView Radia Management Portal 1.0/2.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/13414/info A remote command execution vulnerability affects HP OpenView Radia Management Portal. This issue is due to a failure of the application to properly secure access to critical functionality. This is due to a directory traversal issue that will...

gld 1.4 (Postfix Greylisting Daemon) Remote Format String Exploit

No description provided by source. / 0x82-meOw-linuxerforever - gld 1.4 remote overflow format string exploit. c 2005 Team INetCop Security. Nickname of this code is, Kill two bird with one stone.' or, One shot, two kill!.' hehehe ;-D Advisory URL:...

Microsoft Internet Explorer Malformed URI Buffer Overflow Vulnerability

Description A buffer overflow vulnerability is reported in Microsoft Internet Explorer. This issue is due to insufficient boundary verification of user-supplied input data causing a fixed-sized memory buffer to be overrun when attempting to copy data into it. This vulnerability allows...

Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow (MS05-020)

Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow MS05-020 source: https://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit thi...

Multiple Vendor ICMP Implementation - Malformed Path MTU Denial of Service

Multiple Vendor ICMP Implementation - Malformed Path MTU Denial of Service source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nod...