RealServer < 8.0.2 (Windows Platforms) - Remote Overflow

// / THCunREAL 0.2 - Wind0wZ remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / / / This is the much more reliable version of the Realserver 8.0.2 exploit / / Tested with different OSes and Realserver Versions / / / / While...

SFAD03-001: iWeb Mini Web Server Remote Directory Traversal

================================================================= ...............: S e c u r i t y F r e a k s :............... .................: www.securityfreaks.com :.................. ================================================================= Title : iWeb Mini Web Server Remote...

Advisory: Webster HTTP Server

ABSTRACT Webster HTTP Server is an HTTP/1.0 server written in C++ using Microsoft Foundation Classes MFC. It runs on Windows 95, 98, NT, 2000, Me, and XP platforms. It was first published as a sample application in Microsoft Journal MSJ. Multiple security flaws have been identified in Webster tha...

acFTP Authentication Issue

acFTP is an open-source FTP daemon for Windows platforms http://www.sourceforge.net/projects/acftp that offers more functionality than many proprietary servers including the MS FTP service. The authentication code of acFTP contains a flaw -- specifically, the server treats users as logged in...

anhttpd141c_exploit.java

Advisory Information -------------------- Name : AN HTTPD Vendor Homepage : http://www.st.rim.or.jp/nakata/ Platforms : Windows9x/Me/NT/2000/XP Vulnerability Type : stack overflow very easy to exploit Vendor Contacted : 17/10/2002 Vendor Replied : 20/10/2002 Vulnerable Versions : 1.30 to 1.41c No...

CVE-2002-1042

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the NS-query-pat parameter...

Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP

Foundstone Labs Advisory - 090502-PCRO Advisory Name: Remotely Exploitable Buffer Overflow in PGP Release Date: September 5, 2002 Application: PGP Corporate Desktop 7.1.1 Platforms: Windows 2000/XP Severity: Remote code execution and plaintext passphrase disclosure Vendors: PGP Corporation...

CVE-2002-1042

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the NS-query-pat parameter...

CVE-2002-1042

CVE-2002-1042 describes a directory traversal flaw in iPlanet Web Server 6.0 SP2, 4.1 SP9, and Netscape Enterprise Server 3.6 on Windows, allowing remote attackers to read arbitrary files via ..\ in the NS-query-pat parameter. Connected sources confirm the affected products and the vulnerable par...

Multiple vendors web server source code disclosure (8.3 name form at vulnerability - take II)

//////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////// ======================== Security Advisory ======================== ////////////////////////////////////////////////////////////////////////////...

AIM's 'Direct Connection' feature could lead to arbitrary file creation

AIM's 'Direct Connection' feature could lead to arbitrary file creation ---------------------------------------------------------------------- - Author: Noah Johnson [email protected] Affected versions: All versions of AOL Instant Messenger up to 4.8 beta on all platforms of Windows as far as I...

Orange Web Server v2.1 DoS

Introduction: Orange Web Server v2.1 is a powerful yet light- weight web server that runs on all Windows platforms. Easy to setup and use, Orange Web Server can turn any PC into a web server. The httpd is based on GoAhead c Technology. The Vendors website is:...

Advisory:Multiple Vulnerabilities in ZoneAlarm

Date: 12.20.2000 Name: Multiple Vulnerabilities in ZoneAlarm Application: ZoneAlarm 2.1.44 Platforms: Windows 9x, ME, NT, 2000 Severity: ZoneAlarm does not detect several types of common Nmap scans. It is also possible for a remote attacker, under certain circumstances, to gain complete access to...

CVE-2000-0505

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters...

Shambala 4.5 vulnerability

Subject: DoS in Shambala Server 4.5 Platforms: Microsoft Windows 9x, WIndows NT and Windows 2000 Risk Level High Author: zillion Vendor: Evolvable Corporation Vendor status: Notified 4 weeks ago. The problem will be fixed in a next release Subject: ========= Shambala Server 4.5 denial of service...

CVE-2000-0505

The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters...

Microsoft Office 2000 Advisory

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: Microsoft Office 2000 UA Control Scripting Release Date: 5-12-2000 Application: Microsoft Office 2000 Platform: Windows 95/98, NT 4.0 and 2000 Severity: Malicious active content can execute regardless o...

The Bat! X-BAT-FILES

"The Bat!" by RitLabs is extremely convenient mail agent with a lot of features for Windows platforms. One of "The Bat!" features is storing files attached to e-mail messages apart from messages bodies. In this case "The Bat!" puts attached files in preconfigured folder and removes according MIME...

McAfee 4.0 Network Associates for Windows NT 4.0.24.0.3 a Norton AntiVirus 2000 - Recycle Bin Exclusion

McAfee 4.0 Network Associates for Windows NT 4.0.24.0.3 a Norton AntiVirus 2000 - Recycle Bin Exclusion McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source:...

norton.2000.txt

This was going to be w00giving 11 w00giving 10 will be posted within the next few days. Anyway, this allows EIP to be overwritten with 265+ bytes, which person who posted this vulnerability failed to mention or failed to notice. It's unclear if he labeled it as a DoS because he didn't realize it...