Sendmail 8.12.x - Header Processing Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this vulnerability may be locally...

Half Life clanmod format string bug

Formst string bug in cmlog command requires rcon access...

Quake II Server performs console variable expansion on client-supplied input values

Overview The Quake II Server contains an information leakage vulnerability that allows remote attackers to gain control of the game server process. Description The Quake II Server responds to console commands from Quake II clients to perform a variety of game and server management functions. Both...

Unauthorized remote control access to systems running Funk Softwa re's Proxy v3.x

BindView Security Advisory -------- Unauthorized remote control access to systems running Funk Software's Proxy v3.x Issue Date: April 8, 2002 Contact: Chris Coffin [email protected] CVE: CAN-2002-0064, CAN-2002-0065, CAN-2002-0066 Overview: Funk Software's Proxy v3.x Remote Control...

CVE-1999-1414

IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges...

CVE-1999-1414

Technical details for CVE-1999-1414 are not publicly available in the provided documents. Monitor for updates from official sources.

BadBlue XSS vulnerabilities / Filesharing Server Worm

Strumpf Noir Society Advisories ! Public release ! -- -= BadBlue XSS vulnerabilities / Filesharing Server Worm =- Release date: Tuesday, February 26, 2002 Introduction: BadBlue is the technology behind Working Resources Inc.'s product line with the same name and which, amongst other things, also...

Addendum Re: Internet Explorer Pop-Up OBJECT Tag Bug

Pop-Up Bug Notes First, adding an addendum about the bug which Dave Ahmad discovered: This can be used with the window object as well, when setting the document body's innerHTML property and using method "window.open". This information has been forwarded to the vendor. Secondly, there are a numbe...

CVE-2001-1359

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...

Fw: [net-com] Bug in Mirc v5.82

----- Original Message ----- From: Trax [email protected] To: opers-xnet [email protected] Cc: net-com-xnet [email protected] Sent: Sunday, April 22, 2001 1:40 PM Subject: net-com Bug in Mirc v5.82 There is a bug in mirc v5.82 that allows remote control of clients via /quote and /ctcp not the ctcp...

CFINGERD remote vulnerability

Hi Following the recent habits, I break the advisory into 4 parts: OVERVIEW: --------- There is a critical bug in cfingerd daemon = 1.4.3, a classic format bug that makes possible to acquire full control over the remote machine if it runs the cfingerd program, the configurable and secure finger...

CVE-2001-0285

The CVE-2001-0285 issue affects the A1 HTTP server 1.0a, where a buffer overflow is triggered by a long HTTP request. This vulnerability could allow remote attackers to cause a denial of service and potentially execute arbitrary commands. The provided documents identify the vulnerable component a...

ISC BIND 8.2.x - TSIG Remote Stack Overflow (2)

ISC BIND 8.2.x - TSIG Remote Stack Overflow 2 / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleak" bug through UDP ...

CVE-2000-0100

The CVE-2000-0100 entry concerns the SMS Remote Control program, which is installed with insecure permissions that let local users gain privileges by modifying or replacing the program. The NVD entry assigns a CVSS v2.0 base score of 7.2 (HIGH) with LOCAL attack vector, low attack complexity, and...

CVE-2000-0100

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...

CVE-2000-0217

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program...

A funny way to DOS pcANYWHERE8.0 and 9.0

i found a funny thing about pcANYWHERE. when we use pcANYWHERE remote control client to connect the host running pcANYWHERE, at first the statu bar appears "pcANYWHERE connecting..." ,then the login window will appear; but if we press "Cancel" before the login window appears, the pcANYWHERE servi...

Kuang2 the Virus Detection

Kuang2 the Virus was found. Kuang2 the Virus is a program that infects all the executables on the system, as well as set up a server that allows the remote control of the computer. The client program allows files to be browsed, uploaded, downloaded, hidden, etc on the infected machine. The client...

Netopia Timbuktu Pro Remote Control 2.0/5.2.1 - Denial of Service

source: https://www.securityfocus.com/bid/984/info Simple connections and disconnections to Timbuktu ports can hang the authentication process and halt all Timbuktu services. To return to normal functionality, the Timbuktu process will need to be killed and the Timbuktu service is required to be...

CVE-2000-0100

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...