[USN-297-3] Thunderbird vulnerabilities

=========================================================== Ubuntu Security Notice USN-297-3 July 26, 2006 mozilla-thunderbird vulnerabilities CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779, CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2784, CVE-2006-2787...

SUSE-SA:2003:029: pptpd

The remote host is missing the patch for the advisory SUSE-SA:2003:029 pptpd. The PPTP daemon contains a remotely exploitable buffer overflow which was introduced due to a integer overflow in the third argument passed to the read library call. This bug has been fixed. Since there is no workaround...

RHEL 2.1 : openssl (RHSA-2004:119)

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography...

IBM Director 3.1 Windows Agent Remote DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory by Juanma Merino Remote DoS on IBM Director 3.1 Agent for Windows Reported to esCERT UPC on: May 2003 no response Vendor contacted on: March 1, 2004 no response Vendor: IBM www.ibm.com Systems Affected: IBM Director 3.1 Agent for...

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service source: https://www.securityfocus.com/bid/8683/info The Gauntlet Firewall SQL gateway sql-gw is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the...

SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service

SmartMail Server 1.0 Beta 10 - Oversized Request Denial of Service source: https://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via...

Long URL causes TelCondex SimpleWebServer to crash

Hi! I've found a vulnerability in TelCondex SimpleWebServer 2.06.20817 Build 3128 tested on Windows XP Professional. It could be that prior versions are also affected. It's possible to crash the web server application with a long URL starting from 539 Chars1. You'll see a popup message on the...

Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc. It has been reported that sending an excessive number of requests for...

Galacticomm Worldgroup 3.20 - Remote FTP Denial of Service

// source: https://www.securityfocus.com/bid/4185/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been reported in the FTP server includ...

SecurityOffice Security Advisory:// Essentia Web Server DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Essentia Web Server DoS Vulnerability Type: DoS, crashes Daemon Release Date: February 22, 2002 Product / Vendor: The Essentia Web Server provides Enhanced Web Application and Communication Services. Whether you are setting up a simple Web Site on you...

pcAnywhere Remote DoS

Tested on pcAnywhere 9.2, it seems if you connect then disconnect to pcAnywhere host service about 300 - 500 times the service will stop responding. The only way to get it to respond is to restart the service. The latest version of pcAnywhere is 10 and we don't have it but I would imagine it has...

Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service

Alt-N MDaemon 3.5.65.0.76.x - IMAP Denial of Service source: https://www.securityfocus.com/bid/2508/info A successfully logged-in user, via IMAP, could cause MDaemon to terminate the connection. If the user submits either a 'SELECT' or 'EXAMINE' command appended with 250 or more characters, MDaem...

Working Resources BadBlue 1.2.7 - Denial of Service

source: https://www.securityfocus.com/bid/2392/info It is possible for a remote user to cause a denial of service condition in Working Resources BadBlue. Requesting a specially crafted URL composed of 284 or more bytes, will cause the server to crash. A restart of the server is required in order ...

McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 - Denial of Service

source : https://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause the CPU utilization to spike to 100%. A restart of the application i...

Unify eWave ServletExec 3.0 c - Denial of Service

Unify eWave ServletExec 3.0 c - Denial of Service source: https://www.securityfocus.com/bid/1868/info Unify eWave ServletExec is a Java/Java Servlet engine plug-in for major web servers such as Microsoft IIS, Apache, Netscape Enterprise Server, etc. eWave ServletExec is susceptible to a denial of...

Evolvable Shambala Server 4.5 - Denial of Service

source: https://www.securityfocus.com/bid/1778/info Shambala Server is a FTP, Web, and Chat server targeted for the Small Office/Home Office user. The FTP server component does not properly handle certain incoming connection and disconnection requests. Successful exploitation could lead to...

Computer Software Manufaktur Alibaba 2.0 - Denial of Service

Computer Software Manufaktur Alibaba 2.0 - Denial of Service // source: https://www.securityfocus.com/bid/1482/info It is possible for a user to initiate a denial of service against Alibaba Web Server. Sending an unusually long GET request 8000 bytes to the server will cause the service to stop...

HP OpenView OmniBack II 2.553.03.1 - Denial of Service

HP OpenView OmniBack II 2.553.03.1 - Denial of Service source: https://www.securityfocus.com/bid/1015/info Multiple open connections to port 5555 can cause the HP OpenView OmniBack program to crash by consuming 100% CPU cycles. Closing the connections will not alleviate this problem, therefore a...

Microsoft IIS 4.0 - Pickup Directory Denial of Service

Microsoft IIS 4.0 - Pickup Directory Denial of Service source: https://www.securityfocus.com/bid/1819/info An email with a filename consisting of over 86 characters and an extension of .txt.eml will cause Microsoft IIS to crash if placed in the \mailroot\pickup directory. The process inetinfo.exe...

Microsoft IIS 4.0 - Pickup Directory Denial of Service

source: https://www.securityfocus.com/bid/1819/info An email with a filename consisting of over 86 characters and an extension of .txt.eml will cause Microsoft IIS to crash if placed in the \mailroot\pickup directory. The process inetinfo.exe will crash, resulting in a Dr. Watson access violation...