LeadMind Pop Messenger 1.60 - Illegal Character Remote Denial of Service

LeadMind Pop Messenger 1.60 - Illegal Character Remote Denial of Service // source: https://www.securityfocus.com/bid/11230/info LeadMind Pop Messenger is reported prone to a remote denial of service vulnerability. The issue exists because the messenger application fails to gracefully handle...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME RFC2047 encoding issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-007 -- Scope -- The aim of this document is to clearly...

DoS in Bird Chat 1.61

Donato Ferrante Application: Bird Chat http://birdchat.sourceforge.net/ Version: 1.61 Bug: Denial Of Service Date: 23-Aug-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Descriptio...

Multiple ircii-based Clients Remote Overflows

Binary data 1858.prm...

Mozilla contains a buffer overflow in the SendUidl() function

Overview A vulnerability in the way Mozilla handles certain types of POP3 responses could allow a remote attacker to execute arbitrary code on an affected system. Description Post Office Protocol Version 3 POP3 is a mail protocol that provides a means for retrieving email from a remote server. Th...

Mozilla Web Client Detection

Binary data 1769.prm...

CVE-2004-0432

ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions...

SUSE-SA:2003:031: nfs-utils

The remote host is missing the patch for the advisory SUSE-SA:2003:031 nfs-utils. The nfs-utils package contains various programs to offer and manage certain RPC services such as the rpc.mountd. iSEC Security Research has reported an off-by-one bug in the xlog function used by the rpc.mountd. It ...

RHEL 2.1 : up2date (RHSA-2003:268)

New versions of the up2date and rhnregister clients are available and are required for continued access to Red Hat Network. The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. This erratum includes an updated RHNS-CA-CERT file,...

security flaw

Ethereal 0.10.3 allows remote attackers to cause a denial of service crash via certain SIP messages between Hotsip servers and clients...

Colin McRae Rally 04 broadcast clients crash

Luigi Auriemma Application: Colin McRae Rally 04 http://www.codemasters.com/colinmcraerally04/ Versions: 1.0 Platforms: Windows Bug: bad allocation ? Risk: medium Exploitation: remote, versus clients broadcast Date: 04 June 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

PT-2004-1618 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.3 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending certain SIP messages between Hotsip servers and clients. Recommendations: For Ethereal version 0.10.3,...

CVE-2004-0405

CVS before 1.11 allows CVS clients to read arbitrary files via .. dot dot sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180...

CVE-2004-0405

CVE-2004-0405 and related CVEs affect CVS up to version 1.11.x. The Debian/Mandrake/Gentoo/Nessus advisories describe two issues: (1) CVS pserver can be abused to view files outside the repository root by using relative pathnames containing ‘..’ (CVE-2004-0405); (2) CVS servers/clients can simila...

NTP service vulnerable to internal overflow if date / time offset is greater than 34 years

Overview NTP Network TIme Protocol contains an integer overflow vulnerability that may lead to clients receiving an incorrect date/time offset. Description NTP Network Time Protocol is a method by which client machines can synchronize the local date and time with a reference server. The server wi...

smbmountDoS.txt

Announced: 2004-02-02 Type: Denial of Service Attack on Windows Impact: smbmount can stop Windows from sharing files Writer: Daniel Kabs, Germany [email protected] Credits: Thanks to Steve Ladjabi [email protected] Contents: 1. Abstract 2. Affected Systems 3. Attack Setup 4. Symptoms 5...

CVE-2003-1125

Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service service halt...

Multiple vulnerabilites in vendor IKE implementations, including Cisco,

Nortel, and Microsoft Reply-To: [email protected] INTRODUCTION This message will describe two serious vulnerabilities in the default configurations of IKE implementations. They are particularly common in so called "VPN client" implementations. Both allow easy session stealing and man-in-the-middle...

CVE-2003-0789

modcgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client...

Advisory 02/2003: emule/xmule/lmule vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: eMule/lmule/xmule multiple remote vulnerabilities Release Date: 2003/08/17 Last Modified: 2003/08/17 Author: Stefan Esser [email protected] Application: eMule = 0.29c xmule = 1.4.3, = 1.5.6a lmule = 1.3.1 Severity: Several...