Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0

Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0 http://www.youngzsoft.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY CMailServer, a small and easy to administer email server software and web...

Youngzsoft CMailServer 4.0 - 'RCPT TO' Buffer Overflow

source: https://www.securityfocus.com/bid/7548/info A buffer overflow vulnerability has been reported for CMailServer. The vulnerability exists due to insufficient bounds checking when parsing e-mail headers. Specifically, an overly long RCPT TO e-mail header will cause CMailServer to crash and...

FTGatePro.txt

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 1328 http://www.ftgate.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY FTGatePro is Floosietek's flagship server. The comprehensi...

youbin local root exploit + advisory

I. BACKGROUND $ more /usr/ports/mail/youbin/pkg-descr ---- From README slightly modified --- youbin is a kind of biff in the network age. When youbin is used, the mail spool of a certain, specific machine mail server is observed to inform the arrival of mail to a user at an arbitrary machine...

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 (1328)

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 1328 http://www.ftgate.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY FTGatePro is Floosietek's flagship server. The comprehensi...

Flaw in Microsoft VM Could Enable System Compromise

TITLE : Microsoft Virtual Machine Bytecode Verifier Vulnerability CRITICAL : Highly critical IMPACT : System access OPERATING SYSTEM: Microsoft Windows 95 Microsoft Windows 98 and 98SE Microsoft Windows Millennium Microsoft Windows NT 4.0, beginning with Service Pack 1 Microsoft Windows 2000...

Microsoft Security Bulletin MS03-011:Flaw in Microsoft VM Could Enable System Compromise (816093)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Microsoft VM Could Enable System Compromise 816093 Date: 09 April 2003 Software: Microsoft VM Impact: Allow attacker to execute code of his or her choice Max Risk: Critical...

Security Update: [CSSA-2003-015.0] Linux: apcupsd remote root vulnerability and buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: apcupsd Announcement-ID: SuSE-SA:2003:022 Date: Wednesday, Mar 26th 2003 14:00 MET Affected products: 7.3, 8.0, 8.1 Vulnerability Type: remote system compromise Severity 1-10: 3 SuSE default package: no Cross References:...

CGI bugs

No description provided...

MySQL 3.23.x - mysqld Local Privilege Escalation

MySQL 3.23.x - mysqld Local Privilege Escalation source: https://www.securityfocus.com/bid/7052/info A vulnerability has been discovered for MySQL that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a DATADIR/my.cnf that...

Terminal Emulator Security Issues

TERMINAL EMULATOR SECURITY ISSUES Copyright © 2003 Digital Defense Incorporated All Rights Reserved Table of Contents -- Summary -- Disclaimer -- Escape Sequences -- Remote Exploitation -- Screen Dumping -- Window Title Reporting -- Miscellaneous Issues -- Terminal Defense -- Tested Emulator...

sircd -- remote reverse DNS buffer overflow

Secunia reports: A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is caused by a boundary error in the code handling reverse DNS lookups, when a user connects to the service. If the FQDN Fully Qualified Domain Name returned is...

Oracle bfilename function buffer overflow vulnerability (#NISR16022003e)

NGSSoftware Insight Security Research Advisory Name: ORACLE bfilename function buffer overflow vulnerability Systems Affected: All platforms; Oracle9i Database Release 2, 9i Release 1, 8i, 8.1.7, 8.0.6 Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.oracle.com...

Oracle unauthenticated remote system compromise (#NISR16022003a)

NGSSoftware Insight Security Research Advisory Name: Oracle unauthenticated remote system compromise Systems Affected: All platforms; Oracle9i Database Release 2, 9i Release 1, 8i, 8.1.7, 8.0.6 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.oracle.com Author...

Microsoft Internet Explorer allows arbitrary local file reading via "showHelp()" function

Overview A vulnerability in Microsoft Internet Explorer IE allows remote attackers to read arbitrary files on a vulnerable system. Description A vulnerability in the showHelp Method contained within IE may allow a remote attacker to read arbitrary files. For further details, please see the...

RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002)

NGSSoftware Insight Security Research Advisory Name: Muliple Buffer overruns RealNetworks Helix Universal Server 9.0 Systems Affected: Windows, FreeBSD, HP-UX, AIX, Linux, Sun Solaris 2.7 & 2.8 Severity: High Risk Category: Buffer Overrun Vendor URL: http://www.real.com/ Author: Mark Litchfield...

Microsoft Security Bulletin MS02-072: Unchecked Buffer in Windows Shell Could Enable System Compromise (Q329390)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Enable System Compromise 329390 Date: 18 December 2002 Software: Microsoft Windows XP Impact: Run code of an attacker's choice Max Risk:...

Microsoft Security Bulletin MS02-069: Flaw in Microsoft VM Could Enable System Compromise (810030)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Microsoft VM Could Enable System Compromise 810030 Date: 11 December 2002 Software: Microsoft VM Impact: Eight vulnerabilities, the most serious of which would enable an...

Security Bulletin MS02-058: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676)

---------------------------------------------------------------------- Title: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise Q328676 Date: 10 October 2002 Software: Outlook Express Impact: Run code of attacker's choice. Max Risk: Critical Bulletin: MS02-058...

remote SYSTEM compromise in WASD OpenVMS http server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in WASD http server for OpenVMS Version 1.0, 25 Sept 2002. 0. Contents 1. Summary 2. Severity: Critical 3. Vulnerable versions 4. Description 5. Solutions 6. Examples of site weaknesses 7. Conclusion 8. Acknowledgments 9...