4546 matches found
Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow
// source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a malicious request. By sending a custom-crafted ftp:// URL...
ScriptEase MiniWeb Server DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ScriptEase MiniWeb Server DoS Vulnerability Type: DoS, crashes Daemon Release Date: February 19, 2002 Product / Vendor: The ScriptEase MiniWeb Server, written entirely in ScriptEase, is being distributed free by Nombas. This server is not intended to...
Ximian Mozilla: The 2618 Bug
NOTE TO THE MODERATOR: This was sent yesterday but i guess didn't make it since this doesn't seem to affect a redhat itself, it affects the mozilla packages distrbuted by Ximian: The test system look like: bash rpm -qa | grep mozilla mozilla-0.9.8-1.ximian.2 mozilla-mail-0.9.8-1.ximian.2...
Переполнение буфера в BlackICE (buffer overflow)
Сервер падает от ICMP-флуда...
Sambar Webserver v5.1 DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sambar Webserver v5.1 DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 16, 2002 Product / Vendor: Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. http://www.sambar.com Summary: Sambar Webserver i...
Pi3Web Webserver v2.0 Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pi3Web Webserver v2.0 Buffer Overflow Vulnerability Type: DoS, crashes Daemon Release Date: January 14, 2002 Product / Vendor: Pi3Web is a free, multithreaded, highly configurable and extensible HTTP server and development environment for cross platfo...
Web Server 4D/eCommerce 3.5.3 DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Web Server 4D/eCommerce 3.5.3 DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 15, 2002 Product / Vendor: Web Server 4D/eCommerce is a single application that includes a shopping cart, credit card authorization, and order tracking - ...
ZBServer Pro DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZBServer Pro DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 15, 2002 Product / Vendor: ZBServer Pro Edition for Windows 95 and NT offers all the functionality of an integrated Web, Gopher, FTP and Chat server...
Переполнение буфера и DoS в awhttpd (buffer overflow)
Сервер вылетает при обращении к несуществующему файлу в CGI. Переполнение кучи...
ATPhttpd 0.4 DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ATPhttpd 0.4 DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 13, 2001 Product / Vendor: ATPhttpd, the tiny, caching, high performance webserver. ATPhttpd is ideal for serving lots of static content, especially where disk I/O is...
ISSalert: ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
Vulnerabilities in QVT/Term
-----BEGIN PGP SIGNED MESSAGE----- Vulnerabilities in QVT/Term Overview QVT/Term v5.0 is a suite of Internet tools available from http://www.qpc.com/. Two vulnerabilities exist in the FTP daemon. The first allows a remote user to list the files outside the ftp root. The second allows a remote use...
CVE-1999-1224
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT abort signal, which allows local users to crash the server imapd via certain sequences of commands, which causes a core dump that may contain sensitive password information...
CVE-1999-1224
The vulnerability CVE-1999-1224 affects IMAP 4.1 BETA (and possibly other versions) where improper handling of the SIGABRT signal allows a local user to crash the imapd server, resulting in a core dump that may contain sensitive password information. This is a local-attack scenario with partial c...
CVE-1999-1516
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string...
CVE-1999-1012
The CVE-1999-1012 entry refers to the SMTP component in Lotus Domino 4.6.1 (on AS/400 and possibly other OSes), where a remote attacker can crash the mail server by sending a long string. The description provides the affected product and the root cause (unbounded/long input) leading to a service ...
CVE-1999-0808
CVE-1999-0808 highlights multiple buffer overflows in ISC DHCP Distribution server (dhcpd) versions 1.0 and 2.0. The root cause, as documented, is unsafe handling of long options, which can be exploited by a remote attacker to cause a crash and potentially execute arbitrary commands. Affected com...
Denial of Service in SHOUTcast Server 1.8.2 Linux/w32/?
Vendor : Nullsoft Product : SHOUTcast Server 1.8.2 Linux/win32/? Date : 01/08/2001 CONTENTS 1. Overview 2. Details 3. Systems. 4. Denial of Service 5. Vendor Response 1. Overview: SHOUTcast Server is a streaming audio server. A "bad" client request can crash the server. 2. Details Server crash wh...
cold fusion 5.0 cfrethrow exploit
Vulnerable: Cold Fusion 5.0 Invulnerable: Versions of Cold Fusion below 5.0 do not seem to have the same problem. OS: Only tried on RedHat Linus 2.4.2-2 1 Allaire reports a Cold Fusion bug that can be found at this address: http://www.allaire.com/Handlers/index.cfm?ID=17560&Method=Full. The bug...