Microsoft Windows XP - HCP URI Buffer Overflow

source: https://www.securityfocus.com/bid/6802/info A buffer overrun vulnerability was reported for helpctr.exe. The vulnerability exists due to insufficient bounds checking on input supplied via the HCP URI parameter. An attacker can exploit this vulnerability by making a HCP request with an...

Netscape Enterprise Server 4.1 - HTTP Method Name Buffer Overflow

source: https://www.securityfocus.com/bid/6792/info It has been reported that iPlanet Web Server and Netscape Enterprise Server are prone to a remotely exploitable buffer overflow condition. This is due to insufficient bounds checking when handling HTTP requests. This condition is reportedly...

Innfeed Buffer Overflow

====================================================================== Defcom Labs Advisory def-2001-19 innfeed buffer overflow Author: Enrique A. Sanchez Montellano @defcom.com Author: Alex Hernandez [email protected] Release Date: 2001-04-18...

MDaemon IMAP Denial Of Service

Advisory Name:MDaemon IMAP Denial Of Service Discovered:23rd Of March 2001 Application:Alt-N Technologies MDaemon 3.5.6 - Other versions most likely prior to this Platform:Windows 2k,95/98/NT - others unknown Severity:Denial of service from application Credit:[email protected] Vendor Status:Unkno...

Buffer oveflow in FTPFS (linux kernel module)

FTPFS http://sourceforge.net/projects/ftpfs is a Linux kernel module, enhancing VFS with FTP volume mounting capabilities. However, it has insufficient bounds checking. If a user can enter mount options through a wrapper, he can take over the whole system, even with restricted capabilities. Here'...

Rob Malda ASCDC 0.3 - Local Buffer Overflow (2)

Rob Malda ASCDC 0.3 - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2462/info ascdc is a program written for X by Rob Malda. It is designed to provide a graphical interface to cd changing on linux systems. A vulnerability in the program could allow elevated privileges on a...

Rob Malda ASCDC 0.3 - Local Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/2462/info ascdc is a program written for X by Rob Malda. It is designed to provide a graphical interface to cd changing on linux systems. A vulnerability in the program could allow elevated privileges on a system with the package installed setuid. Due t...

Rob Malda ASCDC 0.3 - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2462/info ascdc is a program written for X by Rob Malda. It is designed to provide a graphical interface to cd changing on linux systems. A vulnerability in the program could allow elevated privileges on a system with the package installed setuid. Due ...

Joe Kloss RobinHood 1.1 - Remote Buffer Overflow

source : https://www.securityfocus.com/bid/1944/info RobinHood is a HTTP/1.1 web server based upon libHTTP and is designed for the BeOS platform. Improper bounds checking exists in code that handles requests RHCWindow.cpp and RHLogger.cpp. The components RHConsole and RHDaemon will cease operatio...

Avirt Mail 4.x DoS

Issue: ------ Avirt Mail 4.x up to latest version is vulnerable to denial of service while handling a SMTP session. Tested versions: ---------------- Avirt Mail 4.0 build 4124 - vulnerable Avirt Mail 4.2 build 4807 - vulnerable Both versions where tested on Windows 98 since I do not have access...

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service // source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the...

Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service

// source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the 'RCPT TO:' field will crash the application upon terminati...

012.txt

From [email protected] Wed Aug 2 11:08:46 2000 Return-Path: Date: Mon, 2 Aug 0100 11:56:57 +0000 Reply-To: [email protected] Sender: Bugtraq List From: [email protected] Subject: Local root compromise in PGX Config Sun Sparc Solaris To: [email protected] hi guys and gals yeah heres...

Multiple bugs in Alibaba 2.0

Application: Alibaba 2.0 Problem Type: Multiple Problems3 Author: [email protected] Platforms: Windows 95/98/NT Vendor Status: Not Informed Vendor Website: http://csm.alcyonis.fr Product Description ------------------- Alibaba is a fully functional http server for windows 95/98/NT. It...

DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k.

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with th...

telsrv.txt

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: Prizm Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with the ability to remotel...

Lame DoS in WEBactive win65/NT server

Application: ITAfrica's WebACTIVE version 1.00 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT Vendor Status: Not Informed, Project discontinuedI think Download URL: ftp://ftp.mira.net/mirrors/winsock-l/Windows95/Daemons/HTTPD/activ100.zip Product...

webactive.txt

Application: ITAfrica's WEBactive version 1.00 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/NT Vendor Status: Not Informed, Project discontinuedI think Download URL: ftp://ftp.mira.net/mirrors/winsock-l/Windows95/Daemons/HTTPD/activ100.zip Product...

dalnet 4.6.5 remote vulnerability

This was something that w00w00 was originally going to release under the w00giving, but we never did. So, I thought this would fit well with vuln-dev. The complication is that no individual variable is large enough to fit shellcode, so it requires splitting the shellcode between the nickname,...

Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 Vulnerability USSR Advisory Code: USSR-2000046 Release Date: June 16, 2000 Systems Affected: Dragon Server v2.00 Dragon Server v1.00 THE PROBLEM The Ussr Labs team has recently discovered ...