Buffer Overflow Vulnerability Found in MailMax Version 5

Buffer Overflow Vulnerability Found in MailMax Version 5 http://www.smartmax.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY This is a scalable e-mail server that supports SMTP, IMAP4 and POP3 protocols. Its...

KDE Security Advisory: PS/PDF file handling vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: PS/PDF file handling vulnerability Original Release Date: 2003-04-09 URL: http://www.kde.org/info/security/advisory-20030409-1.txt 0. References http://bugs.kde.org/showbug.cgi?id=53157 http://bugs.kde.org/showbug.cgi?id=53343...

SETI@home client vulnerable to buffer overflow

Overview A buffer overflow vulnerability in the SETI@home client could allow a remote attacker to execute arbitrary code or cause the SETI@home client to fail. An exploit for this vulnerability is known to exist and may be circulating. Description From the SETI@home website:SETI@home is a...

BSD in.lpd File Name Handling Remote Overflow

The remote bsd-lpd daemon might be vulnerable to a buffer overflow when sent a too long file name and then asked to show the print queue when the file is being printed. An attacker may use this flaw to gain a shell on this host. Because of the conditions to positively check for this flaw are very...

R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0011 Lotus Notes/Domino Web Retriever HTTP Statu...

.MHT Buffer Overflow in Internet Explorer

CANON SYSTEM SOLUTIONS INC. Security Alert VULNERABILITY:.MHT Buffer Overflow in Internet Explorer DATE FOUND:March 2, 2003 Severity:High Riskcode can be executed remotely ========================================================================== ==== SUMMARY: IE5 introduced the new 'Web Archive'...

ftp_banner.txt

Banner Buffer Overflows found in Multible FTP Clients Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY A client side vulnerability in the product allows remote servers to cause the client to crash by sending it a large...

ByteCatcher FTP Client 1.0.4 - 'Server Banner' Buffer Overflow

source: https://www.securityfocus.com/bid/6762/info It has been reported that ByteCatcher FTP client may be prone to a buffer overflow condition. This issue is due to the client not implementing bounds checking on banner data copied into local memory buffers. It may be possible for remote attacke...

KDE Security Advisory: Multiple vulnerabilities in KDE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Multiple vulnerabilities in KDE Original Release Date: 2002-12-20 URL: http://www.kde.org/info/security/advisory-20021220-1.txt 0. References None. 1. Systems affected: All KDE 2 releases and all KDE 3 releases up to and includi...

RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability

RAZOR advisory: Linux kernel 2.2.x /proc/pid/mem mmap vulnerability Issue Date : 12/17/2002 Contact : Michal Zalewski [email protected] CVE number : CAN-2002-1380 Topic: A locally exploitable system crash vulnerability is present in the Linux kernel, versions 2.2.x. The system is likely...

Microsoft Security Bulletin MS02-071

Microsoft Security Bulletin MS02-071 Print Flaw in Windows WMTIMER Message Handling Could Enable Privilege Elevation 328310 Originally posted: December 11, 2002 Summary Who should read this bulletin: Customers using Microsoft® Windows® NT 4.0, Windows 2000, and Windows XP. Impact of vulnerability...

Multiple Sun RPC-based libc implementations fails to provide time-out mechanism when reading data from TCP connections

Overview A denial-of-service vulnerability exists in multiple vendor Sun RPC-based libc implementations. Description Multiple vendor Sun RPC-based libc implementations fail to properly read data from TCP connections. As a result, a remote attacker can deny service to system daemons. --- Impact A...

Multiple vendor ypxfrd map handling vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: ypxfrd Version: read the details CERT vulnerability note: http://www.kb.cert.org/vuls/id/538033 Author: Janusz Niewiadomski [email protected] Date: October 10, 2002 Issue: ====== Improper arguments validation in ypxfrd may allow local attacker to...

R7-0004: Multiple Vendor Long ZIP Entry Filename Processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7 Advisory R7-0004 Multiple Vendor Long ZIP Entry Filename Processing Issu...

DHTML Edit Control for IE5 allows local files to be uploaded to web server

Overview A vulnerability exists in the DHTML Edit Control for IE5 that allows arbitrary local files to be uploaded to a web server. Description DHTML Edit is an activex control that is marked safe-for-scripting. This control can be embedded in a website, and permit local files to be remotely...

RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines

Flaw in calloc and similar routines Integer overflow can occur during the computation of the memory region size by calloc and similar functions. As a result, the function returns a buffer which is too small, possibly resulting in a subsequent buffer overflow. Who Should Read This Document This...

Security Advisory: Raptor Firewall Weak ISN Vulnerability

+==================================================================+ | Ubizen Security Advisory: Raptor Firewall Weak ISN Vulnerability | +==================================================================+ | [email protected] Friday August 02, 2002 |...

opensslrv.txt

30th Jul 2002 COMANDO OpenSSL multiples vulnerabilidades remotas SISTEMAS AFECTADOS OpenSSL 0.9.6d o anterior OpenSSL 0.9.7-beta2 o anterior PROBLEMA En el OpenSSL Aviso de Seguridad, Ben Laurie expone 5 vulnerabilidades remotas. Pekeño recordatorio: ssl es usado en servidores de html, servidores...

R7-0003: Nautilus Symlink Vulnerability

My mail client, Mozilla 1.0 RC1, mangles this advisory and ruins the signature. See attached file for signed version. Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7...

Abyss Webserver 1.0 Administration password file retrieval exploit

Abyss Web Server was just released April 3rd . The Web Server is vulnerable to retrieving the password file on the host's computer. An attacker can send a request to get the password file just by breaking WWWROOT using Unicode. heres a report i wrote NETCRA$H SECURITY REPORT Abyss Web Server 1.0...