3569 matches found
[SECURITY] [DSA-048-1] samba symlink attacks
Package : samba Problem type : symlink attack Debian-specific: no Marcus Meissner discovered that samba was not creating temporary files safely in two places: when a remote user queried a printer queue samba would creates a temporary file in which the queue data would be written. This was doing...
WFTPD Out-of-Sequence RNTO Command DoS
The FTP server running on the remote host is affected by a denial of service vulnerability when executing a RENAME TO RNTO command. An authenticated, remote attacker can crash the FTP server by executing the RENAME TO command before a RENAME FROM RNFR command. C Tenable Network Security, Inc...
vpopmail vchkpw USER/PASS Command Format String
The remote vpopmail server is vulnerable to an input validation bug that could allow any user to crash the server by providing a specially crafted username. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10463; scriptversion "1.23"; scriptcveid"CVE-2000-0583";...
[SECURITY] New version of apcd released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 1, 2000 - ------------------------------------------------------------------------ Package: apcd Vulnerability type:...
ex_anhttpd.txt
by Message by Thread Post Reply To: BugTraq Subject: Some holes for Win/UNIX softwares Date: Tue Nov 02 1999 22:39:56 Author: UNYUN Message-ID: ------------------------------------------------------------------------ 3 AN-HTTPd 1.20b Problem: The test CGIs which are distributed with AN-HTTPd 1.20...
ProFTPD 1.2.0pre4 mkdir Command Directory Name Handling Remote Overflow
It was possible to crash the remote FTP server by creating a large number of nested directories and then trying to upload a file. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...
insmod.linux.txt
Date: Tue, 30 Mar 1999 22:08:13 -0500 From: Brian Szymanski To: [email protected] Subject: linux insmod bug/security vulnerability Howdy all, Recently I discovered a bug in insmod that would require a lot of time and luck to exploit, but is nonetheless important for systems wanting rock-solid...
Qualcomm qpopper 2.4 - POP Server Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/133/info A number of buffer-overflow issues reside in versions prior to 2.5 of Qualcomm's 'qpopper' program. Exploiting this issue allows a remote attacker to execute arbitrary commands on hosts that are running a vulnerable version. To determine if yo...