CVE-2002-0965

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICENAME parameter, which is not properly handled when writing an error message to a log file...

CVE-2002-1052

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...

Security Bulletin MS02-048: Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates (Q323172)

---------------------------------------------------------------------- Title: Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates Q323172 Date: 28 August 2002 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Millennium Microsoft...

Qualcomm Eudora 5 - MIME MultiPart Boundary Buffer Overflow

Qualcomm Eudora 5 - MIME MultiPart Boundary Buffer Overflow source: https://www.securityfocus.com/bid/5397/info A buffer overflow vulnerability has been reported in Qualcomm's Eudora mail client for Windows systems. The condition occurs if a MIME multipart boundary is of excessive length. Remote...

Buffer overflow in Windows HELP

Buffer overflow during ActiveX companent invocation...

DoS against Windows and other systems

A number of fragmented packet cause host to freeze during the attack...

iPlanet Web Server 4.1 - Search Component File Disclosure

iPlanet Web Server 4.1 - Search Component File Disclosure source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary...

argospill.sh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team N.finity Security Advisory 03/07/2002 Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal Summary =================== Argosoft Mail Server Pro contains a built-in HTTP server for webmail access. Without logging in, an attacker can d...

Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal

Team N.finity Security Advisory 03/07/2002 Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal Summary =================== Argosoft Mail Server Pro contains a built-in HTTP server for webmail access. Without logging in, an attacker can do a reverse directory traversal to retrieve an...

Pirch 98 Link Handling Buffer Overflow

Author: David D. Rude II [email protected] Release Date: June 20th 2002 Systems Affected: All versions of Windows Capable of running this software. Severity: Medium Credits: Cryptix from irc.pulltheplug.com Introduction: This bug was discovered a very long time ago by cryptix. When I was made awa...

Unauthorized remote control access to systems running Funk Softwa re's Proxy v3.x

BindView Security Advisory -------- Unauthorized remote control access to systems running Funk Software's Proxy v3.x Issue Date: April 8, 2002 Contact: Chris Coffin [email protected] CVE: CAN-2002-0064, CAN-2002-0065, CAN-2002-0066 Overview: Funk Software's Proxy v3.x Remote Control...

Fw: Multiple Vulnerabilties in Sambar Server

----- Original Message ----- From: NGSSoftware Insight Security Research Advisory NISR To: [email protected] Sent: Monday, April 01, 2002 12:07 PM Subject: Multiple Vulnerabilties in Sambar Server NGSSoftware Insight Security Research Advisory Name: Sambar Server 5.0 server.exe Systems...

Progress Database 9.1 - sqlcpp Local Buffer Overflow

// source: https://www.securityfocus.com/bid/4402/info Progress is a commercial database for Microsoft Windows and Unix systems. A buffer overflow has been reported in the sqlcpp program included with Progress, used as a SQL preprocessor. Execution of arbitrary code is possible. This issue has be...

Apache Win32 1.3.x/2.0.x - Batch File Remote Command Execution

source: https://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary commands on the host running the vulnerable software. It shou...

CVE-2002-0053

Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and...

MIRC 2.x3.x4.x5.x - Nick Buffer Overflow

MIRC 2.x3.x4.x5.x - Nick Buffer Overflow // source: https://www.securityfocus.com/bid/4027/info mIRC is a popular Internet Relay Chat client whichs runs of Microsoft Windows 9x/ME/NT/2000/XP operating systems. A remote exploitable buffer overflow condition has been discovered in mIRC. This issue ...

Cyberstop Web Server 0.1 - Long Request Denial of Service

source: https://www.securityfocus.com/bid/3930/info Cyberstop is a web server for Windows 9x/NT/2000 systems. Attacks can be launched on a Cyberstop host if a request is submitted containing an unusual number of arbitrary characters. Cyberstop web server will stop responding, a restart of the...

AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability Type: File Disclosure Release Date: January 6, 2002 Product / Vendor: AOLserver is America Online's Open-Source web server. AOLserver is the backbone of the largest and busiest production...

CVE-2001-0877

Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via 1 a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic e.g., chargen, or 2 via a spoofed SSDP...

Advisory CA-2001-16

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-16 Oracle 8i contains buffer overflow in TNS listener Original release date: July 03, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Oracle 8i Overview A...