3717 matches found
CVE-2001-1359
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...
CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome
Core Security Technologies Advisory http://www.coresecurity.com Vulnerability in GNOME's Eye of Gnome Date Published: 2003-03-28 Last Update: 2003-03-27 Advisory ID: CORE-2003-0304-03 Bugtraq ID: 7121 CVE Name: CAN-2003-0165 Title: GNOME's Eye Of Gnome incorrect file name handling Class: Input...
eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities
eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat...
eDonkey Clients 0.44/0.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities
source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat dialog boxes are opened by the eDonkey or Overnet clients. Every open chat dialog bo...
Buffer overflows in ircII based clients
Multiple buffer overflows can only be exploited from server side...
Buffer overflows in ircII-based clients
After seeing the BitchX "DoS" problem mentioned the n'th time already, I decided to finally audit ircII based clients to show some worse problems they have. I had been pretty sure for years that malicious servers can exploit them in multiple ways, and I think many others have known it as well. EP...
CVE-2003-0047
SSH2 clients for VanDyke 1 SecureCRT 4.0.2 and 3.4.7, 2 SecureFX 2.1.2 and 2.0.4, and 3 Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...
CVE-2003-0047
SSH2 clients for VanDyke 1 SecureCRT 4.0.2 and 3.4.7, 2 SecureFX 2.1.2 and 2.0.4, and 3 Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...
Weak password encryption in memory for multiple SSH2 clients
User's password stays in memory uinecnrypted...
Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions of 'login' descended from System ...
DEBIAN-CVE-2002-1653
Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...
CVE-2002-1345
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. dot dot sequences...
CVE-2002-1345
Technical details for CVE-2002-1345 are not provided in the supplied connected documents; no explicit affected products, versions, or fixes are available here. Monitor for updates.
CVE-2002-1358
CVE-2002-1358 affects multiple SSH2 servers/clients that fail to handle lists with empty elements or empty strings. The underlying issue can lead to a denial of service and, in some contexts, arbitrary code execution, as demonstrated by the SSHredder test suite. Public references (NVD/NVD-derived...
CVE-2002-1357
CVE-2002-1357 affects multiple SSH2 servers/clients and arises from improper handling of packets/data elements with incorrect length specifiers. This can lead to denial of service or possibly arbitrary code execution, as demonstrated by the SSHredder SSH protocol test suite. Connected scanners no...
CVE-2002-1360
Summary (CVE-2002-1360) Multiple SSH2 servers/clients fail to properly handle strings containing null characters when the string length is dictated by a length field. This can lead to denial of service and, in some cases, potential arbitrary code execution as demonstrated by the SSHredder test su...
CVE-2002-1345
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. dot dot sequences...
CVE-2002-1359
CVE-2002-1359 involves a buffer overflow in multiple SSH2 implementations, notably the PuTTY SSH client (affected versions: <= 0.53). The issue arises when handling large packets/fields during SSH, as demonstrated by the SSHredder test suite, potentially enabling remote code execution or a den...
CERT Advisory CA-2002-36 Multiple Vulnerabilities in SSH Implementations
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-36 Multiple Vulnerabilities in SSH Implementations Original issue date: December 16, 2002 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Secure shell SSH protocol implementations in...