Courier-imap debugging format string

Pre-authentication format string bug in debugging function...

FreeBSD : Cyrus IMAP pre-authentication heap overflow vulnerability (33)

The following package needs to be updated: cyrus %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg35f6fdf8a42511d89c6d0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

Robo-FTP Pre-authentication Command Execution DoS

The remote host seems to be running Robo-FTP. According to its banner, this version has a denial of service vulnerability. Sending certain commands to the service before authentication has been negotiated causes the service to crash. This script was written by Audun Larsen Changes by Tenable: - u...

Dell OpenManage Web Server Heap Overflow

Product: Dell OpenManage Web Server 3.4.0 and others assumed vulnerable. Vulnerability: Pre-Authentication Heap Based Buffer Overflow Severity: High Risk Status: Vendor notified but security contact on vacation. Support also contacted but believed our issue is related to our hard drive being full...

CVE-2003-1030

DameWare Mini Remote Control is affected by a pre-authentication buffer overflow in the service listening on TCP 6129, allowing remote code execution. The issue affects versions before 3.73; remediation is to upgrade to 3.73.0.0 or later. The connected Nessus data confirms remote exploitation via...

DameWare Mini Remote Control Server <= 3.72 Buffer Overflow

Product: DameWare Mini Remote Control = 3.72.0.0 Vulnerability: Pre-Authentication Buffer Overflow Severity: High Risk Status: Vendor responded very quickly and has resolved the issue in 3.73 and later. The new version can be downloaded from http://www.dameware.com/downloads. Description: A buffe...

DameWare Mini Remote Control Server 3.7x - Buffer Overflow (3)

DameWare Mini Remote Control Server 3.7x - Buffer Overflow 3 // source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain...

DameWare Mini Remote Control Server 3.7x - Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts using the vulnerable software. ...

DameWare Mini Remote Control Server 3.7x - Buffer Overflow (2)

DameWare Mini Remote Control Server 3.7x - Buffer Overflow 2 // source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain...

LSH 1.x - Remote Buffer Overflow (2)

LSH 1.x - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable...

LSH 1.x - Remote Buffer Overflow (1)

LSH 1.x - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable...

LSH 1.x - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable pre-authentication. Successful exploitation could...

LSH 1.x - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable pre-authentication. Successful exploitation could...

Cyrus IMAP pre-authentication heap overflow vulnerability

In December 2002, Timo Sirainen reported: Cyrus IMAP server has a remotely exploitable pre-login buffer overflow. ... Note that you don't have to log in before exploiting this, and since Cyrus runs everything under one UID, it's possible to read every user's mail in the system. It is unknown...