DSA-318 lyskom-server - denial of service

Bulletin has no description...

BitchX: Crash when channel modes change

On May 7th 2003, we recieved a bug report through our tracking system which noted a crash problem with BitchX for all versions up to 1.0c20cvs. Certain mode changes would cause BitchX to core consistantly. This problem was resolved in less than 24 hours. The patch was commited to CVS by powuh...

KaZaA - Bad Zone

To follow up my mid Oct post: KaZaA is still launching ads in the local zone. KaZaA was contacted 6 Jan 03 via their bug report page. "Pop-up ads are being spawned from the local hard disk. This puts them in the local zone. Scripts running in this zone can be harmful." I am now awaiting their...

Execution Rights Not Checked Correctly For 16-bit Applications

A 16-bit executable file can be loaded for execution even though the file is flagged with execute permission denied. Platforms: Windows NT, 2000, XP Overview: Windows NT/2000/XP do not check execution rights correctly before allowing 16-bit executables to load. This makes it possible to load and...

FreeBSD-SA-02:36.nfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:36.nfs Security Advisory The FreeBSD Project Topic: Bug in NFS server code allows remote denial of service Category: core Module: nfs Announced: 2002-08-05 Credits: Mike...

UT DDoS risk

Application: Unreal Tournament Win version, Linux and Mac not tested Version: all the version 436 vulnerable too Bug: UT servers send a great number of packets to every host that send only 1 packet to them, for 2 min and 30 sec Risk: UT servers used as flooders, DDoS risk Author: Auriemma Luigi...

KPMG-2002006: Lotus Domino Physical Path Revealed

-------------------------------------------------------------------- -=Lotus Domino Physical Path Revealed=- courtesy of KPMG Denmark BUG-ID: 2002006 Released: 02nd Apr 2002 -------------------------------------------------------------------- Problem: ======== Due to problems handling Windows DOS...

uucp --config patch -- not sufficient

Problem: uucp patch from RedHat possibly others prevents original exploit, but not variations. Severity: Potential for local root on some distributions, uucp.uucp on others. https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=54466 I had seen this report some time ago, and thought: "Good. They've...

Lynx format string vulnerability in URL logging.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The vendor has been notified, but since this is a low risk I am releasing early. Vapid Labs Larry W. Cashdollar Bug Report Summary: lynx has a format string vulnerability in LYUtils.c line 7995 due to a bad call to syslog, where the format argument is...

WRSHDNT 2.21.00 CPU overusage

WRSHDNT 2.21.00 CPU overusage Greetings, Denicomp Systems fixed previous bug partially: version 2.21.00 is prone to the same bug when port number is 1024. Support personnel reply to my bug report was: "If you don't write buggy rsh clients, you don't have a problem :" Cheers, Martin / WRSHDNT...

Buffer overflow in Python code

Hi, I've found buffer overflow in Python 2.1.1 source code. Maybe there're many others The buffer overflow is in the file traceback.c in the directory Python of the Python source code. Simply there's a sprintf done in this way: sprintflinebuf,FMT,filename,lineno,name What cause the overflow is th...

Bug in compile portion for older versions of CheckPoint Firewalls

There is a bug in how CheckPoint firewalls prior to version 4.0 SP2 handled compiling the firewall policy on Solaris workstations. I was actually migrating a client from version 4.0 SP1 when I stumbled on this. The vendor was contacted on January 30, 2001 and responded on February 2, 2001 that th...

g6-dos.txt

The FTP server G6 v 2.00 freezes if told to create a directory "COM1", "COM2", "COM3" or "COM4" MKD COM1 The version tested was running on win2k. The upload was allowed into /upload bug submitter: GkOS -- Best regards, Konstantin mailto:[email protected] aka GkOS...

ftp.server.025.txt

Andrisk Security Advisory 1 - FTP server v0.25 Topic: FTP Server v.025 Announced: 2001-04-25 Affects: FTP server version 0.25 OS : Win9x/NT I. Problem Description FTP Server 0.25 is an FTP server for Windows 9x/NT. A bug allows any user download and view any files from remote computer. II. Impact...

WebMaster ConferenceRoom 1.8 Developer Edition - Denial of Service

source: https://www.securityfocus.com/bid/2178/info WebMaster ConferenceRoom Developer Edition is a chat package which enables a large community of users to chat together. ConferenceRoom has a wide range of capabilities and a user friendly channel moderation feature. It is possible to cause a...

CA's InoculateIT Agent for Exchange Server

Hi, I'm new in the list, my 1st msg: The CA's InoculateIT Agent for Exchange Server cannot detect some messages that have the SMTP headers changed. In October/1999 I reported it to local CA support office, but still now nothing have done. Guys at [email protected] seem to ignore my messages. The bug...

swstack.txt

Simple Web Server 0.5.1 bug report ================================== I have recently noticed an interesting bug in Simple Web Server 0.5.1, while browsing around various http daemon codes. apperantly sws uses a small routine that adds your socket input, char by char, into an array of strings see...

Security Bug in Jana HTTP Server

Hello Bugtraqers, I found a directory travelling bug again, this time in JANA HTTP Server software available as freeware from http://www.jana-server.ocm.de . Here is a copy of the mail I sended to the author. eAX -------------------------------------------- Hello Thomas, I got your proxy/perver...

beos.dos.txt

Problem: It is possible to crash the BeOS networking process. Discussion: The BeOS networking stack crashes when certain malformed packets are sent to it. This document explains two such packets. The first is an IP packet with the protocol field set to TCP. If the IP length field is set to be...

elm_filter.txt

Subject: elm filter program To: [email protected] Mark Ultor wrote: I've found a bug in filter on Elm 2.4 PL25. filter got SGID on mail group. sowatech:$ filter -f perl -e ' print "A" x 5000' Segmentation fault "filter" is inherently unsafe. A bug has been described in 1995 which allows...