Format string

Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service service crash via format string specifiers in certain unexpected commands, which trigger a crash during error logging...

CVE-2007-4335

WinGate (Qbik WinGate) SMTP server before 6.2.2 is vulnerable to a remote denial-of-service due to a format-string vulnerability in its error-logging path. Affected products are WinGate 5.x and 6.x prior to 6.2.2; exploitation can crash the service by sending certain unexpected commands that trig...

CVE-2007-4335

Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service service crash via format string specifiers in certain unexpected commands, which trigger a crash during error logging...

WinGate SMTP会话无效状态远程拒绝服务漏洞

BUGTRAQ ID: 25272 Qbik WinGate是一款Internet网关和通讯服务器。 WinGate在处理畸形请求时存在格式串处理漏洞，远程攻击者可能利用此漏洞导致服务不可用。 WinGate的SMTP服务器组件没有正确地处理与客户端创建的SMTP会话。如果恶意的客户端初始化了到SMTP服务器的连接，就可能通过向服务器发布非预期的命令强制会话成为无效状态。如果出现了这种情况，就会生成错误消息记录问题，而攻击者可以在这个格式化的错误消息中将所提供的数据传输给对vsprintf的不安全调用。这种格式串攻击会导致进程崩溃。 Qbik WinGate 6.x Qbik WinGa...

[HS-A007] Qbik WinGate Remote Denial of Service

Title ===== HS-A007 Qbik WinGate Remote Denial of Service Date ==== 10 August 2007 Affected Software ================= WinGate versions 5.x and 6.x prior to 6.2.2. Overview ======== WinGate by Qbik IP Management Limited is a sophisticated gateway and server product used in over 600,000 networks...

WinGate < 6.2.2 Invalid SMTP State Remote DoS

Binary data 4166.prm...

WinGate Invalid SMTP State Format String DoS

The remote host appears to be running WinGate, a Windows application for managing and securing Internet access. The version of WinGate installed on the remote host fails to sanitize user-supplied input to its SMTP server component of format strings before using it to log a problem. By connecting ...

Qbik WinGate远程拒绝服务漏洞

Qbik WinGate是一款Intenet网关和通信服务器。 Qbik WinGate处理特殊的DNS请求存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 发送一个包含引用自身的压缩的名字指针的DNS请求，可导致应用程序消耗大量CPU而造成拒绝服务，使应用程序停止相应。 Qbik WinGate 6.1.4 Qbik WinGate 6.1.3 Qbik WinGate 6.1.2 Qbik WinGate 6.1.1 .1077 Qbik WinGate 6.1 升级程序： Qbik WinGate 6.1 Qbik WinGate6.2.0.1121-USE.EXE...

CVE-2006-4518

Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a DNS request with a self-referencing compressed name pointer, which triggers an infinite loop...

CVE-2006-4518

CVE-2006-4518 affects Qbik WinGate 6.1.4 and earlier. The vulnerability arises in processing DNS requests with compressed name pointers: a self-referencing pointer can trigger an infinite loop, causing the WinGate proxy to consume 100% of CPU and effectively deny service. Exploitation is unauthen...

CVE-2006-4518

Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a DNS request with a self-referencing compressed name pointer, which triggers an infinite loop...

Qbik WinGate压缩名称指针拒绝服务漏洞

Qbik WinGate是一款Internet网关和通讯服务器。 Qbik WinGate在处理畸形的DNS报文时存在漏洞，远程攻击者可能利用此漏洞导致DNS无法响应正常请求。 如果DNS请求包含有引用其自身的压缩名称指针的话，则向Qbik WinGate服务器发送了这样请求就会导致死循环，耗尽所有CPU资源。 Qbik WinGate = 6.1.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wingate.com/download.php x00\x00 - Transaction ID \x00\x00 - Flags \x00\x0...

WinGate < 6.2.0 Compressed Name Pointer DoS

Binary data 3818.prm...

WinGate DNS Compressed Name Pointer DoS

The remote host appears to be running WinGate, a Windows application for managing and securing Internet access. The version of WinGate installed on the remote host contains a flaw involving the processing of DNS requests with compressed name pointers. By sending a specially crafted DNS request to...

QBIK Wingate DoS

Nedless loop on compressed DNS requests processing...

iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability

Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability iDefense Security Advisory 11.26.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 26, 2006 I. BACKGROUND Qbik WinGate is an Internet gateway and communications server. It includes functionality related to efficientl...

WinGate directory traversal

Directory traversal with IMAP...

[SA20707] WinGate IMAP Commands Directory Traversal Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...

WinGate IMAP Server Directory Traversal Vulnerabilities

The remote host appears to be running WinGate, a Windows application for managing and securing Internet access. The version of WinGate installed on the remote host fails to remove directory traversal sequences from the 'CREATE', 'SELECT', 'DELETE', 'RENAME', 'COPY', 'APPEND', and 'LIST' commands...

CVE-2006-2917

Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the 1 CREATE, 2 SELECT, 3 DELETE, ...