Xpand Rally 1.0.0.0 (ServerClients) - Crash

Xpand Rally 1.0.0.0 ServerClients - Crash / by Luigi Auriemma / include include include ifdef WIN32 include / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid...

Opened attachments are temporarily saved world-readable — Mozilla

Mozilla software released after March 2004 saves some temporary files with world-readable permissions. In the browser this is primarily content fed to helper applications for example, PDF files, and in the mail clients it is attachments...

Mail responds to cookie requests — Mozilla

Mozilla mail clients from March to December 2004 responded to cookie requests accompanying content loaded over HTTP, ignoring the setting of the preference "network.cookie.disableCookieForMailNews" disabled cookies are the default in mail...

CVE-2004-2050

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell...

CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow

CoffeeCup FTP Clients Direct 6.2.0.62 Free 3.0.0.10 - Remote Buffer Overflow / CoffeeCup FTP Clients Buffer Overflow Vulnerability Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on: CoffeeCup Direct FTP 6.2.0.62 CoffeeCup Free FTP 3.0.0.10...

CoffeeCup FTP Clients (Direct <= 6.2.0.62) (Free <= 3.0.0.10) BoF Expl

Exploit for unknown platform in category remote exploits ========================================================================= CoffeeCup FTP Clients Direct coffeecupbof direct -l exploit for CoffeeCup Direct FTP executed locally C:\ coffeecupbof free -r 10.0.0.1 exploit for CoffeeCup Free FTP...

Server crash in Flash Messaging 5.2.0g

Luigi Auriemma Application: Flash Messaging http://www.flashmessage.com Versions: = 5.2.0g rev 1.1.2 Platforms: Windows Bugs: - server crash - unkickable clients Exploitation: remote, versus server Date: 07 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

RHEL 2.1 : samba (RHSA-2004:498)

Updated samba packages that fix an input validation vulnerability are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Karol Wiesek discovered an input validation issue in Samba prior to 3.0.6. An authenticated user could send a carefully crafted request to the...

CVE-2003-1014

The CVE-2003-1014 issue affects multiple content security gateway and antivirus products. It arises from how MIME messages with multiple fields of the same name are parsed, allowing remote attackers to bypass content restrictions because different mail clients or security tools may interpret the ...

CVE-2003-1015

CVE-2003-1015: Affects multiple content security gateway and antivirus products. Issue: MIME messages that use whitespace in an unusual fashion may be interpreted differently by mail clients, allowing bypass of content restrictions (vulnerability in how MIME is parsed). Impact: potential bypass o...

CVE-2004-0053

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients...

CVE-2003-1014

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients...

LeadMind Pop Messenger 1.60 - Illegal Character Remote Denial of Service

LeadMind Pop Messenger 1.60 - Illegal Character Remote Denial of Service // source: https://www.securityfocus.com/bid/11230/info LeadMind Pop Messenger is reported prone to a remote denial of service vulnerability. The issue exists because the messenger application fails to gracefully handle...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME RFC2047 encoding issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-007 -- Scope -- The aim of this document is to clearly...

DoS in Bird Chat 1.61

Donato Ferrante Application: Bird Chat http://birdchat.sourceforge.net/ Version: 1.61 Bug: Denial Of Service Date: 23-Aug-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Descriptio...

Multiple ircii-based Clients Remote Overflows

Binary data 1858.prm...

Mozilla contains a buffer overflow in the SendUidl() function

Overview A vulnerability in the way Mozilla handles certain types of POP3 responses could allow a remote attacker to execute arbitrary code on an affected system. Description Post Office Protocol Version 3 POP3 is a mail protocol that provides a means for retrieving email from a remote server. Th...

Mozilla Web Client Detection

Binary data 1769.prm...

CVE-2004-0432

ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions...

SUSE-SA:2003:031: nfs-utils

The remote host is missing the patch for the advisory SUSE-SA:2003:031 nfs-utils. The nfs-utils package contains various programs to offer and manage certain RPC services such as the rpc.mountd. iSEC Security Research has reported an off-by-one bug in the xlog function used by the rpc.mountd. It ...