Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow // source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a maliciou...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

// source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a malicious request. By sending a custom-crafted ftp:// URL...

DeleGate 7.7.1 - Cross-Site Scripting

DeleGate 7.7.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/3749/info DeleGate is a proxy server which runs on Linux , Unix, Microsoft Windows and OS/2 platforms. It is capable of translating a number of protocolsHTTP, FTP, NNTP, POP, Telnet, etc. between client and server...

CVE-2001-0843

Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service crash via a mkdir-only FTP PUT request...

CVE-1999-1202: Undefined Security Weakness

StarTech 1 POP3 proxy server and 2 telnet server allows remote attackers to cause a denial of service via a long USER command...

Proxomitron Naoko-4 - Cross-Site Scripting

Proxomitron Naoko-4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/3087/info Proxomitron is a free web proxy server. Proxomitron is vulnerable to a cross site scripting attack. The condition is present because of the way URLS are displayed in error messages. It is possible for...

Symantec LiveUpdate stores proxy server passwords in plaintext in registry

Overview A vulnerability exists in the way Symantec LiveUpdate stores proxy server passwords which could allow local users to have read access to the key. Description LiveUpdate version 1.5 stores proxy server passwords in clear text in the registry, under...

CVE-2001-0374

CVE-2001-0374 affects the HTTP server in Compaq Web‑Based Management Agent across multiple products (Foundation Agents, Survey, Power Manager, Availability Agents, Intelligent Cluster Administrator, Insight Manager). The vulnerability allows the management HTTP server to act as a generic proxy, e...

CVE-2001-0374: Undefined Security Weakness

The HTTP server in Compaq web-enabled management software for 1 Foundation Agents, 2 Survey, 3 Power Manager, 4 Availability Agents, 5 Intelligent Cluster Administrator, and 6 Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via th...

CVE-2001-0028

CVE-2001-0028 affects the oops WWW proxy server, version 1.5.2 and earlier, where a buffer overflow in the HTML parsing code can be triggered by a large number of " characters. The vulnerability allows remote attackers to execute arbitrary commands. The initial description does not specify affect...

CVE-2001-0028: Undefined Security Weakness

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...

Серьезные дырки в KTH Kerberos IV

Пользователь может указать krb4proxy для перенаправления запроса на авторизацию собственному прокси-серверу. В сочетании с переполнением буфера это дает возможность удаленного root-доступа. Локальный пользователь может указать собственные конфигурационные файлы, которые будут использованы для...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

CVE-2001-0029: Undefined Security Weakness

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

pkc001.txt

/ pkc001.txt / -= SECURITY ADVISORY 001 =- | \ www.pkcrew.org / \ \ | / \ | | | | | / | | | | | / | | | | / | | / / | | | / | Application : Oops proxy server 1.4.22 1.4.6 and maybe prior Type: heap buffer overflow --- The problem --- Function listparser in ftputils.c : line is the line sent by th...

tinyProxy Long Connect Request Overflow

It was possible to make the remote service crash by sending it the command : connect AAA...AAAA:// It may be possible for an attacker to execute arbitrary code on this host thanks to this flaw. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10596; scriptversion "1.26"...

CVE-2000-1185

The CVE-2000-1185 entry concerns the telnet proxy component of the RideWay PN proxy server. According to the description, remote attackers can cause a denial of service by sending a flood of connections containing malformed requests. The primary documented impact is a partial loss of availability...

CVE-2000-1185: Undefined Security Weakness

The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests...

Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow

Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow /--oopz.c---//-------------r-3-m-0-t-3---------------\------------- TARGET : oops-1.4.6 one russi4n proxy-server CLASS : remote 0S : FreeBSD 4.0 - 2 AUTH0R : diman VEND0R : wanna payment for support. I'm not doing his job, yeh? DATE :...

Oops! 1.4.6 (one russi4n proxy-server) Heap Buffer Overflow Exploit

Exploit for bsd platform in category remote exploits =================================================================== Oops! 1.4.6 one russi4n proxy-server Heap Buffer Overflow Exploit ===================================================================...