PragmaSys TelnetServer 2000 - rexec Buffer Overflow

PragmaSys TelnetServer 2000 - rexec Buffer Overflow source: https://www.securityfocus.com/bid/1605/info Pragma Systems offers a windows remote access server called TelnetServer 2000. TelnetServer crashes if more than 1000 NULL characters are sent to its rexec port, 512. This can be executed by an...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

Exploit for Totalbill...

Totalbill is a complete billing and provisioning system for ISPs, and it's written by Aptis Software www.aptissoftware.com. There is one part of it that sits on your mail and radius servers called Sysgen that listens on a port sometimes 9998, but it usually varies, and it allows the incoming...

MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1568/info Mediahouse Statistics Server LiveStats is susceptible to a buffer overflow attack if a URL in a GET request contains over 2030 bytes. Depending on the data inserted into the request, the application will crash or can be forced to execute arbitra...

NAI Net Tools PKI Server 1.0 - 'strong.exe' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1536/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a buffer overflow vulnerability which could lead to a remote compromise of the system running the PKI server. The problem lies within the...

CVE-2000-0656

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol...

Buffer Overflow in MS Outlook Email Clients

Security Advisory: Buffer Overflow in MS Outlook & Outlook Express Email Clients Date: 18th July 2000 Author: Aaron Drew mailto:[email protected] Versions Affected: MS Outlook 97/2000 and MS Outlook Express 4/5 A bug in a shared component of Microsoft Outlook and Outlook Express mai...

Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow (1)

Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow 1 source: https://www.securityfocus.com/bid/1481/info All versions of Microsoft Outlook and Outlook Express are vulnerable to buffer overflow attacks where a remote user is capable of executing arbitrary code on an emai...

West Street Software LocalWEB HTTP Server 1.2 - Buffer Overflow

source: https://www.securityfocus.com/bid/1423/info LocalWEB is a freeware HTTP server for the Windows suite of operating systems. Certain versions of this software are vulnerable to a remotely exploitable buffer overflow attack. This attack can instrumented by sending the web server via port 80 ...

Michael Lamont Savant Web Server 2.13.0 - Remote Buffer Overflow

Michael Lamont Savant Web Server 2.13.0 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1453/info A buffer overflow exists in the Savant Web Server. It is possible to exploit this overflow by sending an unusually long GET request to the server. / The MDMA Crew's proof-of-concep...

Michael Lamont Savant Web Server 2.1/3.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1453/info A buffer overflow exists in the Savant Web Server. It is possible to exploit this overflow by sending an unusually long GET request to the server. / The MDMA Crew's proof-of-concept code for the buffer overflow in Savant Written by Wizdumb The...

Dragon FTP USER Command Remote Overflow

It was possible to crash the remote FTP server by issuing a USER command followed by a very long argument over 16,000 characters. This is likely due to a remote buffer overflow vulnerability. A remote attacker could exploit this to crash the server, or possibly execute arbitrary code. C Tenable...

Re: rh 6.2 - gid compromises, etc

slrnpull setgid: news - using eg. NNTPSERVER environmental variable, you can cause nice SEGV... egid==news, of course. On systems running innd server and probably other newsservers as well, group 'news' can be used to control content of whole spool, and to elevate privledges, gaining euid news...

Переполнение буфера в Dmailweb

Переполнение буфера позволяет удаленно выполнить код в контексте сервера...

Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability USSR Advisory Code: USSR-2000047 Release Date: June 16, 2000 Systems Affected: Small HTTP Server ver. 1.212 maybe others THE PROBLEM The Ussr Labs team has recently discovered a buffer...

Переполнение буфера в HP Openview Network Node Manager v6.1

Строка длиной 4068 символов посланная в порт TCP/2345 вызывает классическое переполнение буфера...

Stelian Pop dump 0.4 - restore Buffer Overflow

Stelian Pop dump 0.4 - restore Buffer Overflow // source: https://www.securityfocus.com/bid/1330/info A buffer overflow exists in the 'restore' program, part of the dump 0.4b15-1 package, distributed with RedHat Linux 6.2. By supplying a long string containing machine executable code at the promp...

CVE-2000-0226

IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."...

Переполнение буфера в DMail Server

Классическое переполнение буфера в SMTP-команде ETRN...

NetWin DMail 2.72.8 - ETRN Buffer Overflow

NetWin DMail 2.72.8 - ETRN Buffer Overflow // source: https://www.securityfocus.com/bid/1297/info NetWin's DMail is an alternative mail-server solution for unix and NT servers. There is a buffer overflow vulnerability in the server daemon that could allow remote attackers to execute arbitrary...