1408 matches found
MERCUR SMTP Server EXPN Command Remote Overflow
It was possible to make the remote mail server crash when issuing a very long argument to the EXPN command. A remote attacker could exploit this flaw to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security...
defcom.netscape-enterprise.txt
====================================================================== Defcom Labs Advisory def-2001-04 Netscape Enterprise Server Dot-DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...
def-2001-04: Netscape Enterprise Server Dot-DoS
====================================================================== Defcom Labs Advisory def-2001-04 Netscape Enterprise Server Dot-DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...
Vulnerable: Conference Room Professional-Developer Edititon.
Vulnerable: Conference Room Professional-Developer Edititon. www.webmaster.com Only tested on Windows NT 4.0 sp6a and Windows 2000 pro. Conference Room 1.8.1x or older versions are subject to a DoS attack when following commands are used. Make to connections to the irc server second being the clo...
WebMaster ConferenceRoom 1.8 Developer Edition - Denial of Service
WebMaster ConferenceRoom 1.8 Developer Edition - Denial of Service source: https://www.securityfocus.com/bid/2178/info WebMaster ConferenceRoom Developer Edition is a chat package which enables a large community of users to chat together. ConferenceRoom has a wide range of capabilities and a user...
Infinite Interchange 3.61 - Denial of Service
Infinite Interchange 3.61 - Denial of Service source: https://www.securityfocus.com/bid/2140/info Infinite Interchange is a multi function email server which supports most common internet protocols. An example of various functions include an http server and webmail interface. Unfortunately...
Kerberos client code buffer overflow in kdc_reply_cipher()
Overview There is a buffer overflow is the kdcreplycipher function of KTH Kerberos. This buffer overflow may be exploitable to allow an attacker to gain root privileges, and can be used to deny service. Description The buffer overflow occurs in the parsing of an authentication reply in the...
bftpd NLST Command Output Format String
The remote FTP server, which appears to be Bftpd, has a format string vulnerability in the NLST command. A remote attacker could use this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderso...
SuSE Linux in.identd Request Saturation DoS
Ident is a protocol which gives to the remote server the name of the user who initiated a given connection. It's mainly used by IRC, SMTP and POP servers to obtain the login name of the person who is using their services. There is a flaw in the remote identd daemon which allows anyone to crash...
DoS против PTlink3.5.3ircd
Определенная последовательность команд приводит к краху сервиса...
McAfee WebShield SMTP 4.5 Multiple Vulnerabilities
The remote WebShield server is subject to two flaws : - It may let mail pass against some filter rules if the attached files names have some strange chars in them - It is possible for an outsider to crash this program and force its reinstallation Nessus did not actually test for these flaws - it...
Another thingy.
-- Standard disclaimer applies. I am speaking as a private person, -- and doing it in completely informal way, which shouldn't be interpreted -- in any other way but as my personal opinions and beliefs, which don't have -- to be true. Another thing to add to "commercial products security" thread...
NetcPlus BrowseGate 2.80 - Denial of Service
NetcPlus BrowseGate 2.80 - Denial of Service source: https://www.securityfocus.com/bid/1702/info NetcPlus BrowseGate 2.80 will crash as the result of an invalid read error if a number of character strings consisting of 8 KB are inserted into GET request arguments through port 80. For example: GET...
Texas Imperial Software WFTPD 2.4.1 - RNTO Denial of Service
Texas Imperial Software WFTPD 2.4.1 - RNTO Denial of Service source: https://www.securityfocus.com/bid/1456/info It is possible for a user to cause a denial of service against the WFtpd server. Requesting an RNTO command without using the RNFR command first will cause the server service to stop...
dragonftp.py
!/usr/bin/python Dragon Serverftp DoS Proof of Concept Code. Vulnerability Discovered by USSR Labshttp://www.ussrback.com Simple Script by [email protected] By connecting to port 21ftp on a system running Dragon FTP Server v1.00/2.00 and typing USER 16500 bytes the service will crash This...
Remote DoS attack in AnalogX SimpleServer WWW Version 1.05 Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in AnalogX SimpleServer WWW Version 1.05 Vulnerability USSR Advisory Code: USSR-2000045 Release Date: June 15, 2000 Systems Affected: AnalogX SimpleServer WWW Version 1.05 THE PROBLEM The Ussr Labs team has recently discovered a null...
Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability USSR Advisory Code: USSR-2000047 Release Date: June 16, 2000 Systems Affected: Small HTTP Server ver. 1.212 maybe others THE PROBLEM The Ussr Labs team has recently discovered a buffer...
Shadow Op Software Dragon Server 1.02.0 - Multiple Denial of Service Vulnerabilities
Shadow Op Software Dragon Server 1.02.0 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/1352/info Two denial of service vulnerabilities exist in the Dragon Server package, versions 1.00 and 2.00, from Shadow Ops Software. By supplying large arguments to two...
Microsoft Windows Media Services 4.0/4.1 - Denial of Service (MS00-038)
// source: https://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. If a specially malformed request is sent to the Windows Media Encoder ...