Remote Buffer Overflow vulnerability in Light HTTPd

======================================== INetCop Security Advisory 2002-0x82-002 ======================================== Title: Remote Buffer Overflow vulnerability in Light HTTPd. 0x01. Description Lhttpd that is improved in ghttpd for more convenient and strong webserver, is webserver that off...

ISC BIND 8.3.x - OPT Record Large UDP Denial of Service

// source: https://www.securityfocus.com/bid/6161/info ISC BIND is vulnerable to a denial of service attack. When a DNS lookup is requested on a non-existant sub-domain of a valid domain and an OPT resource record with a large UDP payload is attached, the server may fail. / bindoptdos.c OPT DoS...

SmartMail server DOS

hi SmartMail Server http://www.virtualzone.de/smartmail/is a full featured E-Mail Server. It can be run on any 32Bit compatible Microsoft Windows machine and complies with the standards of SMTP, POP3 and HTTP Webinterface. SmartMail proposes two version of SmartMail server, I found that two...

DSA-184 krb4 - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 183-1] New krb5 packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 183-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2002 http://www.debian.org/security/faq -...

DSA-183 krb5 - buffer overflow

Bulletin has no description...

AN HTTPD 1.381.391.401.41 - SOCKS4 Buffer Overflow

AN HTTPD 1.381.391.401.41 - SOCKS4 Buffer Overflow source: https://www.securityfocus.com/bid/6012/info A buffer overflow vulnerability has been reported for AN HTTPD. The vulnerability is due to insufficient bounds checking of usernames for SOCKS4 requests. When AN HTTPD acts as a SOCKS4 server, ...

bop.pl

hi planetdns http://www.planetdns.netis commercial software package that allows to turn computer into an Internet server. and be able to create an Internet Name, connect to a web server, FTP, mail server, etc. running on computer. planetdns is vulnerable has a buffer overflow with a overwrite of...

PlanetDNS PlanetWeb 1.14 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/5988/info PlanetWeb is a commercially available web server integrated with dynamic DNS services. It is distributed by PlanetDNS, and available for Microsoft Operating Systems. PlanetWeb does not properly handle long requests. Due to insufficient bounds...

New buffer overflow in plaetDNS

hi planetdns http://www.planetdns.netis commercial software package that allows you to turn computer into an Internet server. and be able to create an Internet Name, connect to a web server, FTP, mail server, etc. running on your computer. planetdns is vulnerable has a buffer overflow with a...

Polycom ViaVideo 2.2/3.0 - Denial of Service

source: https://www.securityfocus.com/bid/5962/info Polycom ViaVideo devices are prone to a denial of service condition upon receipt of numerous incomplete HTTP requests. This may restrict availability of the device for legitimate users. The device may need to be restarted to regain normal...

Authoria HR Suite - 'AthCGI.exe' Cross-Site Scripting

source: https://www.securityfocus.com/bid/5932/info Authoria HR Suite is prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will be...

VBZoom 1.0 - SQL Injection

VBZoom 1.0 - SQL Injection source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request...

Vulnerabilitie in PowerFTP server

I've found a DoS vulnerability in PowerFTP. He doesn't need an account on the server. Just send many information at the variable USER. You could see the xploit : / Remote DoS Exploit for PowerFTP server all version / / Coding by Morgan A. member of secureNT-2000 Greetz : / / kdm, Yann, GaLiaRepT,...

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1)

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does n...

GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/5808/info gv is a freely available, open source Portable Document Format PDF and PostScript PS viewing utility. It is available for Unix and Linux operating systems. It has been reported that an insecure sscanf function exists in gv. Due to this...

Rudi Benkovic JAWMail 1.0 - Script Injection

source: https://www.securityfocus.com/bid/5771/info Problems with JAWMail could make it possible to execute arbitrary script code in a vulnerable client. JAWMail does not sufficiently filter malicious HTML code from e-mails. As a result, when a user opens an email in JAWMail that contains malicio...

Trillian 0.74 - IRC Raw Messages Denial of Service

Trillian 0.74 - IRC Raw Messages Denial of Service // source: https://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited ...

AFD 1.2.14 multiple local root compromises

Netric Security Team - http://www.netric.org|be By Netric AFD 1.2.14 multiple local root exploits type: stack and heap overflows Priority: 5 1 Description 2 Vulnerable 3 Exploit 4 Proof of concept 5 Vendor response 6 Patches 1 Description The Automatic File Distributor provides a framework for ve...

RETRY : newly released winamp 3 fails to address serious "execution of arbitrary" code issue when combined with MSIE6

This one was missed by security focus . Lets try again -- jelmer ----- Original Message ----- From: "Jelmer" [email protected] To: [email protected] Sent: Sunday, August 11, 2002 1:28 AM Subject: newly released winamp 3 fails to address serious "execution of arbitrary" code issue...