RealServer Long ramgen Request Remote DoS

It was possible to crash the remote Real Server by sending the request : GET /ramgen/AAAAA...AAA HTTP/1.1 An attacker may use this flaw to prevent this system from serving Real Audio or Video content to legitimate clients. C Tenable Network Security, Inc. Original exploit code : see...

CMail MAIL FROM Command Remote Overflow

The remote host appears to be running a vulnerable version of CMail. Issuing a long argument to the 'MAIL FROM' command can result in a buffer overflow. An attack would look something similar to : MAIL FROM: [email protected] Where AAA...AAA contains more than 8000 'A's. A remote attacker coul...

AIX FTPd libc Library Remote Buffer Overflow

It was possible to crash the remote FTP server by issuing the command : CEL aaaa...aaaa This problem is known as the 'AIX FTPd' overflow and may allow the remote user to easily gain access to the root super-user account on the remote system. C Tenable Network Security, Inc. include"compat.inc"; i...

Netscape Enterprise Server Accept Header Remote Overflow

The remote web server seems to crash when it is issued a too long argument to the 'Accept:' command : Example : GET / HTTP/1.0 Accept: /gif This may allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10154...

ProFTPD mkdir Buffer Overflow

It is possible to crash the remote FTP service by creating a large number of nested directories with names no longer than 255 chars. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...

IMail IMonitor Service Remote Overflow

The remote host appears to be running IMail IMAP server.The installed version is reportedly affected by a buffer overflow vulnerability in the IMonitor. An attacker could exploit this flaw in order to cause a denial of service or potentially execute arbitrary code subject to the privileges of the...

iParty Client Extended Character Handling Remote Overflow DoS

iParty is an audio/text chat program for Windows. The iParty server listens on port 6004 for client requests. If someone connects to it and sends a large amount of ASCII 255 chars, the server will close itself and disconnect all the current users. C Tenable Network Security, Inc...