EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities

Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities Release Date: November 12, 2002 Severity: High Remote SYSTEM level code execution Systems Affected: Macromedia Coldfusion 6.0 and prior IIS ISAPI Macromedia JRun 4.0 and prior IIS ISAPI Description: Macromedia JRun and...

ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612]

Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow Release Date: June 12, 2002 Severity: High Remote code execution Systems Affected: Microsoft Windows NT 4.0 Internet Information Services 4.0 Microsoft Windows 2000 Internet Information Services 5.0 A vulnerability in transfer chunking, in...

CVE-2001-0524

eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier...

CVE-2001-0523

eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that...

CVE-2001-0523

eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that...

CVE-2001-0524

eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier...

Дырки в eEye SecureIIS (protection bypass)

Можно легко обойти различные виды защиты...

ASLabs-2001-01: Multiple Security Problems in eEye SecureIIS

=== Alliance Security Labs === === ASLabs-2001-01: Multiple Security Problems in eEye SecureIIS === Advisory ID: ASLabs-2001-01 Vendor: eEye http://www.eEye.com Product: SecureIIS http://www.eeye.com/html/Products/SecureIIS/index.html Versions: v1.0.2 latest available - probably relevant for 1.0....

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access)

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability Remote SYSTEM Level Access Release Date: May 01, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows 2000 Internet Information Services 5.0 Microsoft Windows 2000 Internet Information Services 5.0 +...

Windows 2000 .printer remote overflow proof of concept exploit

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability Remote SYSTEM Level Access Release Date: May 01, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows 2000 Internet Information Services 5.0 Microsoft Windows 2000 Internet Information Services 5.0 +...

CVE-2001-0184

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet...

CVE-2001-0184

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet...

CVE-2001-0184

CVE-2001-0184 concerns eEye Iris 1.01 beta, where a remote attacker can trigger a denial of service by sending a malformed packet that crashes Iris when viewed. Affected component is the Iris client; underlying cause is mishandling of a crafted packet leading to crash. Exploitation details are no...

eEye Iris the Network traffic analyser DoS

Hi there, There exists a vulnerability that will cause the iris network traffic analyser to hang. I have included an exploit, that will demonstrate the bug, the exploit will send a packet to the remote host, when the remote host opens the packet to examine it iris will quit, leaving an error...

DoS против eEye Iris the Network

При получении определенного пакета программа выходит с ошибкой...

CVE-2000-0734

eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections...

CVE-2000-0734

CVE-2000-0734 affects eEye IRIS 1.01 beta and allows remote actors to trigger a denial of service by exhausting resources through a large number of UDP connections. The available documents describe the affected product and the general impact (DoS) but do not provide explicit root-cause details, a...

CVE-2000-0734

eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections...

Mac Volumes & Junctions

I recently encountered a problem where, if you mount a partition to a path rather than a drive letter and then create a Macintosh volume for it, the permissions set for that volume will be ignored by Mac clients. This is what I did and you can too to reproduce the problem: 1. Create a generic use...

Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 Vulnerability USSR Advisory Code: USSR-2000052 Release Date: August 31, 2000 Systems Affected: Eeye Iris 1.01 SpyNet CaptureNet v3.12 THE PROBLEM: The Ussr Team has found a problem in Eey...