MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Damage Hacking Group security advisory www.dhgroup.org Product: MDaemon SMTP/POP/IMAP server =v.6.7.5 Authors: Alt-N Technologies www.mdaemon.com Vulnerability: remote buffer overflow in IMAP service Overview----------------------------------------------------- ...

Xonic.ru News 1.0 - script.php Remote Command Execution

Xonic.ru News 1.0 - script.php Remote Command Execution source: https://www.securityfocus.com/bid/7365/info A vulnerability has been reported for Xonic.ru News. The problem occurs due to insufficient sanitization of user-supplied data to the 'script.php' file. As a result, it may be possible for ...

McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: ePolicy Orchestrator Format String Vulnerability Release Date: 03/17/2003 Application: McAfee ePolicy Orchestrator 2.5.1 Platform: Windows 2000 Server SP1 Windows 2000 Pro SP1 Severity: The...

ePolicy Orchestrator HTTP GET Request Remote Format String

If the remote web server is ePolicy Orchestrator, an attacker may use this flaw to execute code with the SYSTEM privileges on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Untested. Probably redundant with plugin 11075. include'deprecatednasllevel.inc'; include'compat.inc'; if...

MS02-032: Cumulative patch for Windows Media Player (320920)

The remote version of Windows Media Player is affected by various flaws : - A remote attacker may be able to execute arbitrary code when sending a badly formed file. - A local attacker may gain SYSTEM privileges. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. Fixed in Windows XP SP1...

ISMail Multiple Command Domain Name Handling Remote Overflow

The remote SMTP server probably ISMail seems to be vulnerable to a buffer overflow which could allow an attacker to gain LOCALSYSTEM privileges on this host. C Tenable Network Security, Inc. Ref: Message-ID: Date: Thu, 27 Feb 2003 15:45:17 -0800 From: "NGSSoftware Insight Security Research" To: ,...

Unpassworded 'demos' Account

The account 'demos' has no password set. An attacker may use this account to gain further privileges on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "demos"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11242; scriptversion"1.35";...

MS03-005: Unchecked Buffer in XP Redirector (810577)

The remote version of Windows contains a buffer overflow in the Windows Redirector service that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11231; scriptversion"1.37";...

Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)

NGSSoftware Insight Security Research Advisory Name: Multiple Remote Buffer Overruns TOMAHAWKS' STEELARROW Systems Affected: WinNT, Win2K Not tested on other platforms Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.tomahawk.com Author: Mark Litchfield...

Windows 2000 Network Connection Manager privelege escalation

Callback function is called with system priveleges...

OpenBSD contains buffer overflow in "select" call

Overview A locally exploitable buffer overflow exists in all versions of OpenBSD. Description The buffer overflow exists in the select2 system call. The overflow occurs if select is supplied with arbitrary negative values. --- Impact Local users can gain system privileges and execute code in the...

Microsoft SQL Server contains buffer overflow in code used to process "BULK INSERT" queries

Overview The Microsoft SQL Server contains a buffer overflow vulnerability that may allow remote attackers to execute arbitrary code with system privileges. Description The Microsoft SQL Server contains a buffer overflow vulnerability in the code used to process "Bulk Insert" queries. Bulk Insert...

Buffer overflow in Windows Multiple UNC Provider (MUP) service

Overview A buffer overflow in the Microsoft Windows Multiple UNC Provider MUP could allow a local user to execute code with system privileges. Description Microsoft Windows recognizes resources identified by the Uniform Naming Convention UNC. Requests for resources identified by UNC references ar...

CVE-2002-0151

Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request...

CVE-2002-0367

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit...

CVE-2002-0151: Undefined Security Weakness

Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request...

CVE-2002-0247

Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges...

Macromedia JRun ISAPI DLL filter vulnerable to buffer overflow via request for long Host header field

Overview A remotely exploitable buffer overflow exists in Macromedia's JRun version 3.1 on Win32 platforms. Description A remotely exploitable buffer overflow exists in the Win32 version of Macromedia's JRun version 3.1 on Win32 platforms.JRun is an application server that works with most popular...

CVE-2002-0268

Identix BioLogon 3 is affected. The vulnerability allows users with physical access to elevate to administrative privileges by triggering CTRL-ALT-DEL and invoking a Browse function that launches Explorer with SYSTEM privileges. The issue is described with a CVSSv2 base score of 7.2 (HIGH) and a ...

CVE-2002-0268: Undefined Security Weakness

Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a "Browse" function, which runs Explorer with SYSTEM privileges...