FrontPage 97/98 - Server Image Mapper Buffer Overflow

source: https://www.securityfocus.com/bid/1117/info The htimage.exe and imagemap.exe files included with FrontPage handle server-side image mapping functions. Under normal operations, it would be passed a map name and a set of coordinates in the format http: //target/path/htimage.exe/mapname?x,y...

Webstar 4.0 Buffer overflow vulnerability

Sorry for my poor english ; Webstar 4.0 and earlier, vendor www.starnine.com is popular or not popular -i've never seen MacOS Web, Mail and FTP server for MacOS.One day, when i played with my telnet i found machine with this httpd.When i made long get request 1kb GET /1111111...111.htmlit simply...

fbsd-ping.txt

--0-1774392370-951065021=:49727 Content-Type: TEXT/PLAIN; charset=US-ASCII Attached unofficial patch to drop ICMP packets larger than 8184 bytes. E-Mail/Flame me if not liked... I wanted to be able to set the maximum value via sysctl but I'm not sure if I'll break anything, feel free to pick up...

Pragma Systems InterAccess TelnetD Server 4.0 - Terminal Configuration

Pragma Systems InterAccess TelnetD Server 4.0 - Terminal Configuration source: https://www.securityfocus.com/bid/1001/info The Pragma Systems InterAccess TelnetID Server 4.0 can be crashed by sending invalid, unexpected characters in the client's terminal configuration settings. This causes...

Pragma Systems InterAccess TelnetD Server 4.0 - Terminal Configuration

source: https://www.securityfocus.com/bid/1001/info The Pragma Systems InterAccess TelnetID Server 4.0 can be crashed by sending invalid, unexpected characters in the client's terminal configuration settings. This causes telnetd.exe to GPF, and will cause the server to stop responding...

CVE-1999-0220

Attackers can do a denial of service of IRC by crashing the server...

imonitor.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local / Remote D.o.S Attack in IMail IMONITOR Server for WinNT Version 5.08 USSR Advisory Code: USSR-2000030 Release Date: January 05, 2000 Systems Affected: IMail IMONITOR PORT 8181 Server for WinNT Version 5.08 and maybe other versions. IMail Server...

Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service

source: https://www.securityfocus.com/bid/914/info IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to support web-based monitoring. One of the cgi scripts, status.cgi, is...

Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service

Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buff...

Alt-N WorldClient Pro 2.0.0.0/2.0.1.0/Standard 2.0.0.0 - Long URL Denial of Service

source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buffer in the request handler. Supplying a long url will crash the server. http...

MDaemon WebConfig HTTP Server URL Overflow DoS

It was possible to crash Webconfig which is used to configure MDaemon by sending the request : GET /aaaaa...aaa HTTP/1.0 This could allow a remote attacker to crash the web server, preventing the MDaemon server from being configured remotely. C Tenable Network Security, Inc. include"compat.inc";...

BFTelnet Username Handling Remote Overflow DoS

It was possibly to crash the remote telnet server by sending a very long user name. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable Network Security, Inc. See also: Subject: IBM Infoprint Remote Management Simple DoS Date: Fri, 25 Oct 2002...

AppleShare IP Mail Server 5.0.3 - Buffer Overflow

source: https://www.securityfocus.com/bid/61/info There exists a buffer overflow in the Apple AppleShare IP Mail Server 5.0.3. If yu connect to the SMTP port and issue a HELO command with a large string 500 bytes or more for a hostname the server, and possibly the whole machine, will crash. $...

AppleShare IP Mail Server 5.0.3 - Buffer Overflow

AppleShare IP Mail Server 5.0.3 - Buffer Overflow source: https://www.securityfocus.com/bid/61/info There exists a buffer overflow in the Apple AppleShare IP Mail Server 5.0.3. If yu connect to the SMTP port and issue a HELO command with a large string 500 bytes or more for a hostname the server,...

CVE-1999-0219

Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service crash via a long 1 CWD or 2 LS list command...

netscape_ssl_bug.txt

Subject: Netscape Enterprise Server SSL Handshake Bug To: [email protected] Hi everybody, There exists a SSL handshake bug in Netscape Enterprise Server that can be exploited to crash the server. Netscape has confirmed this, and they also told me that another person reported this to them...

Real Video Server Telnet Malformed Data Remote DoS

It was possible to crash the remote Progressive Networks Real Video Server by sending it specially crafted data. An attacker may use this flaw to prevent you from sharing sound and video. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10183; scriptversion "1.26";...

quake2-more-bof.txt

Date: Fri, 22 Jan 1999 19:48:26 +0100 From: Patrick Oonk To: [email protected] Subject: More Quake2 buffer overflows and nuisances This was forwarded to me by Roderick van Domburg, Quake II admin at GamePoint www.gamepoint.net ----- Forwarded message from Roderick 'GoG' van Domburg ----- From...

quake2-bof-DoS.txt

Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...

lotus-notes-smtp-DoS.txt

Date: Fri, 15 Jan 1999 00:52:53 PST From: Siva Sankar Adiraju To: [email protected] Subject: Lotus Notes SMTP Server bug There is a security bug in IBM's Lotus Notes SMTP server. eg. An SMTP session: helo a 250 notes.foo.com helo b 500 Session already established. The domain name b passed in...