442 matches found
Debian DSA-209-1 : wget - directory traversal
Two problems have been found in the wget package as distributed in Debian GNU/Linux : - Stefano Zacchiroli found a buffer overrun in the urlfilename function, which would make wget segfault on very long URLs - Steven M. Christey discovered that wget did not verify the FTP server response to a NLS...
CVE-2002-1219
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...
CVE-2002-1219
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...
BGP Keep Alive Message Detection (Server Response)
Binary data 1199.prm...
RHEL 2.1 : xchat (RHSA-2002:124)
A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...
EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability
Internet Security Systems PAM ICQ Server Response Processing Vulnerability Release Date: March 18, 2004 Date Reported: March 8, 2004 Severity: High Remote Code Execution Vendor: Internet Security Systems Systems Affected: RealSecure Network 7.0, XPU 22.11 and before RealSecure Server Sensor 7.0 X...
FTP Desktop 3.5 - FTP 331 Server Response Buffer Overflow
FTP Desktop 3.5 - FTP 331 Server Response Buffer Overflow source: https://www.securityfocus.com/bid/8560/info A buffer overflow vulnerability has been reported in FTP Desktop. The vulnerability occurs when FTP Desktop is parsing 331 server responses from remote FTP servers. When FTP Desktop...
FTP Desktop 3.5 - FTP 331 Server Response Buffer Overflow
source: https://www.securityfocus.com/bid/8560/info A buffer overflow vulnerability has been reported in FTP Desktop. The vulnerability occurs when FTP Desktop is parsing 331 server responses from remote FTP servers. When FTP Desktop receives an FTP 331 response exceeding a certain length, it wil...
CVE-2003-0685
Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response...
ypserv DoS
Server awaits response from the client without processing new reqests...
DEBIAN-CVE-2002-1090
Buffer overflow in readsmtpresponse of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to 1 execute arbitrary code via a certain response or 2 cause a denial of service via long server responses...
CVE-2002-0419
Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...
Traffic amplifying via Unreal Tournament
In reply to single UDP packet server will send multiple UDP packet with payload...
CVE-2002-0419
The CVE-2002-0419 entry describes information leaks in Microsoft IIS versions 4 through 5.1 where remote attackers can learn sensitive details via server responses. Specifically, when Basic authentication is used, the server may reveal its IP address as the realm, potentially exposing NAT-obscure...
Multiple buffer overflows in mnews
Buffer overflows on command line processing, environment variables and NNTP server response handling...
mIRC DCC Server Security Flaw
Good afternoon, There is an error in the impmelentation of the mIRC DCC server protocol. This venerability allows an attacker to obtain: 1 The victim's nickname. 2 Whether or not the victim is ignoring the attackers requests for a direct connection. 3 Information regarding the number of IRC serve...
Атака - получение фрагментов памяти через ICMP
При передаче фрагментированного пакета с маленьким TTL сервер отвечает пакетом полной длины, в котором "недостающее" место занято информацией из оперативной памяти...
Rit Research Labs The Bat! 1.x - Missing Linefeeds Denial of Service
Rit Research Labs The Bat! 1.x - Missing Linefeeds Denial of Service source: https://www.securityfocus.com/bid/2636/info "The Bat!" is an MUA for Windows by Rit Research Labs. "The Bat!" is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are...
IE5 crash
Hi stumbled across this crash for IE..I am on 5.00.2614.3500 in Win98SE it seems pretty reproducable with an illegal op in URLMON.dll 1 create a web page local is fine and put in an image to one of your servers..this crash dosent even need an image extension on it...just aim it at a directory or...