BrowseFTP Client 1.62 - Remote Buffer Overflow

BrowseFTP Client 1.62 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3781/info BrowseFTP is an ftp client that runs on various Microsoft Windows operating systems. An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a BrowseFTP...

AOL Instant Messenger 4.x - Remote Buffer Overflow

AOL Instant Messenger 4.x - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game...

Kikkert Security Advisory: Potentially serious security flaw in Citrix Client

Dear List, This 'Kikkert Security advisory' has been released after carefull consideration and after advising 'Citrix' first. Citrix was initially willing to communicate but hasn't responded to any of my emails for the last two months. Because there are workarounds for the problem discribed in th...

CVE-1999-1528

ProSoft Netware Client 5.12 for Macintosh MacOS 9 fails to log a user out of the NDS tree on system logout, potentially allowing other local users to access an unprotected NDS session. This CVE (CVE-1999-1528) is described in public records as a local-privilege/access concern with partial confide...

OpenSSH disregards client configuration and allows server access to ssh-agent and/or X11 after session negotiation

Overview Versions of OpenSSH client prior to 2.3.0 do not properly enforce restrictions to the ssh-agent or X11 display. Description An OpenSSH client can be configured to prevent servers from accessing the client's ssh-agent or X11 display. However, versions of OpenSSH client prior to 2.3.0 fail...

ISC BIND 8.2.2-P6 vulnerable to DoS when processing SRV records, aka the "srv bug"

Overview There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's ISC BIND software. This vulnerability is referred to by the ISC as the "srv bug" and affects ISC BIND versions 8.2 through 8.2.2-P6. Description This vulnerability can cause affected DNS...

MySQL client contains buffer overflow

Overview MySQL is a popular open source database package. The MySQL client that ships with the MySQL package contains a buffer overflow. Description The mysql program, part of the MySQL package, contains a buffer overflow in the host parameter. An intruder who invokes mysql using a specially...

Novell Groupwise Client Vulnerability

Novell GroupWise Client read file/view vulnerability gw5.5epsp2--file view problems-- OS Affected Win 95/98/NT/2000/ME all sp levels Programs Affected GroupWise 5.5ep sp1 other versions of GroupWise 5 are probably vulnerable Discussion with zen polices or NT Polices installed properly on a window...

Дырка в GroupWise client

Пользователь может получить доступ к файлам, доступ к которым запрещен системной политикой используя файлы в качестве вложения в письмо...

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

CVE-2000-0679

The CVE-2000-0679 issue affects the CVS 1.10.8 client, where the client trusts pathnames received from the CVS server. Root cause: pathname handling allows the server to influence file creation. Impact: potential to create arbitrary files on the client. No remediation details are provided in the ...

Security Bulletin (MS01-001)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Web...

Ports Security Advisory: FreeBSD-SA-00:66.netscape

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:66 Security Advisory FreeBSD, Inc. Topic: Client vulnerability in Netscape Category: ports Module: netscape Announced: 2000-11-06 Credits: Michal Zalewski...

FreeBSD-SA-00:66.netscape

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:66 Security Advisory FreeBSD, Inc. Topic: Client vulnerability in Netscape Category: ports Module: netscape Announced: 2000-11-06 Credits: Michal Zalewski Affects: Ports...

Debian 2.x RedHat 6.2 IRIX 56 Solaris 2.x - Mail Reply-To Field

Debian 2.x RedHat 6.2 IRIX 56 Solaris 2.x - Mail Reply-To Field source: https://www.securityfocus.com/bid/1910/info mail is a simple console e-mail client. A vulnerability exists in several vendors' distributions of this program. An attacker can compose an email message with a carefully-formed...

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

MS00-067: Telnet Client NTLM Authentication Vulnerability (272743)

The hotfix for the 'Telnet Client NTLM Authentication' problem has not been applied. This vulnerability may, under certain circumstances, allow a malicious user to obtain cryptographically protected login credentials from another user. C Tenable Network Security, Inc. include"compat.inc"; if...

CVS Kit CVS Server 1.10.8 - Instructed File Create

CVS Kit CVS Server 1.10.8 - Instructed File Create source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be...

CVS Kit CVS Server 1.10.8 - Instructed File Create

source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be tested yourself as follows. Although this example ru...

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow

source: https://www.securityfocus.com/bid/1056/info WebView WebMail-Client is an add-on for the Mercur SMTP/POP3/IMAP4 Mail Server which allows a user to access email through a web browser. Insufficient boundary checking exists in the code which handles GET requests, specifically on port 1080...