yahooPOPS.txt

Hat-Squad Advisory: Remote Buffer overflow Vulnerability in YahooPOPS September 22, 2004 Product: YahooPOPS! Vendor URL: http://yahoopops.sourceforge.net Version: YahooPOPS v0.4 up to v0.6 Vulnerability: Remote Buffer overflows Release Date: 27 September 2004 Vendor Status: Informed on 24 Septemb...

MSSQL 7.0 - Remote Denial of Service

MSSQL 7.0 - Remote Denial of Service / Microsoft mssql 7.0 server is vulnerable to denial of service attack By sending a large buffer with specified data an attacker can stop the service "mssqlserver" the error noticed is different according to services' pack but the result is always the same one...

Debian DSA-422-1 : cvs - remote vulnerability

The account management of the CVS pserver which is used to give remote access to CVS repositories uses a CVSROOT/passwd file in each repository which contains the accounts and their authentication information as well as the name of the local unix account to use when a pserver account is used. Sin...

Microsoft SQL Server 7.0 - Remote Denial of Service (1)

Microsoft SQL Server 7.0 - Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An...

Pinnacle ShowCenter Skin DoS

The remote host runs the Pinnacle ShowCenter web-based interface. The remote version of this software is vulnerable to a remote denial of service due to a lack of sanity checks on skin parameter. With a specially crafted URL, an attacker can deny service of the ShowCenter web-based interface...

bsd/x86 - break chroot 45 bytes

bsd/x86 break chroot 45 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" / movl %esp,%edi / "\x33\xc0" / xorl %eax,%eax / "\x88\x47\x03...

LeadMind Pop Messenger 1.60 - Illegal Character Remote Denial of Service

LeadMind Pop Messenger 1.60 - Illegal Character Remote Denial of Service // source: https://www.securityfocus.com/bid/11230/info LeadMind Pop Messenger is reported prone to a remote denial of service vulnerability. The issue exists because the messenger application fails to gracefully handle...

myserver 0.7 - Directory Traversal

myserver 0.7 - Directory Traversal source: https://www.securityfocus.com/bid/11189/info MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to...

PostNuke News Module article.php sid Parameter XSS

The remote host is running a version of PostNuke which contains the 'News' module which itself is vulnerable to a cross-site scripting issue. An attacker may use these flaws to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

phpGroupWare Wiki Module XSS

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. This issue exists due to a lack of sanitization of user-supplied data. A malicious attacker can exploit a flaw to conduct cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, In...

BlackJumboDog FTP Server 3.6.1 - Remote Buffer Overflow

/ 6.9.04|www.Delikon.de|Delikon BlackJumboDog FTP Server Buffer Overflow version 3.6.1 http://www.securiteam.com/windowsntfocus/5AP040ADPW.html Thx to Chew Keong TAN C:\Codes\blackjumbodog\Releasebjdexploit 192.168.0.3 21 klein.exe BlackJumboDog FTP Server Buffer Overflow version 3.6.1...

TYPSoft FTP Server Crafted RETR Command Sequence Remote DoS

The remote host seems to be running TYPSoft FTP 1.11 or earlier. TYPSoft FTP Server is prone to a remote denial of service vulnerability that may allow an attacker to cause the server to crash by sending a malformed 'RETR' command to the remote server C Tenable Network Security, Inc...

Cerulean Studios Trillian Client 0.74 MSN Module - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/11142/info Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow an attacker to execute arbitrary code on a vulnerable computer. This could...

Ipswitch WhatsUp Gold prn.htm GET Request Remote DoS

Binary data 2263.prm...

CVE-2002-1271

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx...

SUSE-SA:2004:028: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:028 kernel. Various signedness issues and integer overflows have been fixed within kNFSd and the XDR decode functions of kernel 2.6. These bugs can be triggered remotely by sending a package with a trusted source IP address and a...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

GLSA-200406-22 : Pavuk: Remote buffer overflow

The remote host is affected by the vulnerability described in GLSA-200406-22 Pavuk: Remote buffer overflow When Pavuk connects to a web server and the server sends back the HTTP status code 305 Use Proxy, Pavuk copies data from the HTTP Location header in an unsafe manner. Impact : An attacker...

[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...