SUSE CVE-2011-3372

imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...

NNTP Login Utility

This module attempts to authenticate to NNTP services which support the AUTHINFO authentication extension. This module supports AUTHINFO USER/PASS authentication, but does not support AUTHINFO GENERIC or AUTHINFO SASL authentication methods. This module requires Metasploit:...

inn -- plaintext command injection into encrypted channel

INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents...

CVE-2005-2990

CVE-2005-2990 affects the LineContol Java Client (jlc) component, where the AuthInfo.java code path in versions before 0.8.1 logs sensitive data such as user passwords. The documented impact is partial confidentiality loss. No exploitation details are provided in the sources; no explicit remediat...

Переполнение буфера в NNTP сервере CASSANDRA

Переполнение буфера при длинной NNTP команде AUTHINFO...