3340 matches found
CVE-2001-0500
CVE-2001-0500 is a buffer-overflow in the IDQ ISAPI handler (idq.dll) used by Microsoft IIS Indexing Service/Index Server 2.0 (and IIS 6.0 beta and earlier). The vulnerability allows remote attackers to execute arbitrary commands by sending a long argument to the .ida and .idq entry points (e.g.,...
AIM including the beta 4.8.2646 Local/Remote Buffer Oveflow
.--------. / Bugs +-----------------------------------------------------------------------. : Affected : All versions of AIM including the beta 4.8.2646 : Type : Local/Remote Buffer Oveflow : Date : 29-02-2002 : Author : NtWaK0 & Recon @ www.SafeHack.com :...
ICQ For Mac OSX 2.6 Client - Denial of Service
ICQ For Mac OSX 2.6 Client - Denial of Service // source: https://www.securityfocus.com/bid/4031/info ICQ For MacOS X is a port of the popular Mirabilis ICQ client to the Apple MacOS X platform. It is freely available. It is possible to cause MacOS X ICQ clients to crash by sending an excessively...
psyBNC 2.3 Beta - encrypted text "spoofable" in others' irc terminal
BACKGROUND: psyBNC http://www.psychoid.lam3rz.de is an IRC bouncer with a variety of fantastic features. one of these features in encryption of irc text, with keys set on a per-channel basis. SUMMARY: someone call them person A in an irc channel where psyBNC users are chatting encrypted can...
AOL Instant Messenger vulnerable to buffer overflow via long filename
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM permits users to send files from one peer to another. By sending a file with a long name, it is possible to crash th...
AOL Instant Messenger vulnerable to buffer overflow via numerous fonts sent to client followed by < HR>
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window and in some cases the operating systemOS. Description AIM for Windows stores font names in the messages sent from one client to another. B...
[Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released.
mutt-1.2.5.1 and mutt-1.3.25 have just been released. These releases both fix a security hole which can be remotely exploited. The problem was found and a fix suggested by Joost Pol [email protected]. Thanks for that. mutt-1.2.5.1 is released as an update to the last stable version of mutt,...
CVE-2001-0821
DCShop 1.002 beta default configuration exposes sensitive files in the cgi-bin directory (orders.txt, auth_user_file.txt), allowing remote reads via HTTP GET. Connected OpenVAS entry corroborates a vulnerable DCShop CGI release and suggests access to admin passwords, current/pending transactions,...
Formatting string bug on cyrus-sasl library
This issue may be already have been on list. I assume that the moderator this case rejects this mail. On last non-beta version of cyrus-sasl library have formatting string bug on default logging callback. Default cyrys sasl logging callback is static int saslsyslogvoid context attributeunused, in...
CVE-1999-1289
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g., via NAT), potentially exposing sensitive information about the client or internal network configuration. The description does not specify affected vers...
CVE-1999-1269
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file...
CVE-1999-1224
The vulnerability CVE-1999-1224 affects IMAP 4.1 BETA (and possibly other versions) where improper handling of the SIGABRT signal allows a local user to crash the imapd server, resulting in a core dump that may contain sensitive password information. This is a local-attack scenario with partial c...
CVE-1999-1224
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT abort signal, which allows local users to crash the server imapd via certain sequences of commands, which causes a core dump that may contain sensitive password information...
CVE-2001-0184
CVE-2001-0184 concerns eEye Iris 1.01 beta, where a remote attacker can trigger a denial of service by sending a malformed packet that crashes Iris when viewed. Affected component is the Iris client; underlying cause is mishandling of a crafted packet leading to crash. Exploitation details are no...
Solaris 78-beta - ARP Local Overflow
Solaris 78-beta - ARP Local Overflow / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"...
Solaris 7/8-beta - ARP Local Overflow
/ arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"; int mainint ac, char av char shell ...
inux news 22.12.00
Linux kernel 2.4.0-test13-pre4 is out Вышла новая пре версия тестового ядра Linux 2.4.0-test13. В этот раз продолжена реструктуризация мейкфайлов. Также исправлена ошибка в netfilter и обновлены LVM и ACPI Подробнее: http://dredd.crimea.edu/linuxnews/test13-pre4.txt Alan Cox: Linux kernel...
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...
wgate41a.txt
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...
Linux news 29.09.00
Linux 2.2.18pre11 Alax Cox выпустил новую pre-версию следующего стабильного ядра Linux: 2.2.18pre11. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-09-27-011-04-NW-KN MySQL 3.23.25 Вышла новая beta версия популярного SQL сервера MySQL - MySQL 3.23.25. Подробнее:...