CVE-2004-0657

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...

IBM Lotus Notes Detection

The remote service supports the Notes Remote Procedure Call protocol, which is used by Lotus Notes and Lotus Domino to communicate with other servers. C Tenable Network Security, Inc. This plugin positively identifies notes-to-notes communication on top of port 1352 include"compat.inc"; if...

[SecurityOffice] Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Netcharts XBRL Server v4.0.0 Information Leakage Vulnerability -- - -- Type Information Leakage - -- Release Date March 17, 2003 - -- Product / Vendor NetCharts XBRL Server 4.0 is a data visualization service that generates charts and graphs,...

ICQ contains a buffer overflow while processing Voice Video & Games feature requests

Overview There is a remotely exploitable buffer overflow in ICQ. Attackers that are able to exploit the vulnerability may be able to execute arbitrary code with the privileges of the victim user. Description ICQ is a program for communicating with other users over the Internet. ICQ is widely used...

STunnel 3.x - Client Negotiation Protocol Format String

// source: https://www.securityfocus.com/bid/3748/info Stunnel is a freely available, open source cryptography wrapper. It is designed to wrap arbitrary protocols that may or may not support cryptography. It is maintained by the Stunnel project. Stunnel does not properly handle unexpected input b...

AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack

Overview WinVNC's challenge/response mechanism can allow an intruder to obtain legitimate credentials from a valid client in order to gain unauthorized access to the server. Description AT&T WinVNC is a free package available from AT&T Labs Cambridge that allows an existing desktop of a PC to be...

mmdump.pl

Meeting Maker is a networked calendaring/scheduling software package that's estimated to be installed on over 700,000 desktops e.g., see http://www.meetingmaker6.com/presslib/pressrel/mm061499mm6.htm. Meeting Maker is a registered trademark of ON Technology Corporation. Clients send passwords to ...

PT-2000-1202 · Zone · Zonealarm

Name of the Vulnerable Software and Affected Versions: ZoneAlarm affected versions not specified Description: The issue concerns ZoneAlarm sending sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. Recommendations: A...