Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (5)

source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Technote 2000/2001 - 'Filename' Command Execution / File Disclosure

source: https://www.securityfocus.com/bid/2156/info Technote Inc. offers a multi-communication Package that includes a web board type of service. A script that ships with Technote, 'main.cgi', accepts a parameter called 'filename'. This remotely supplied variable is used as a filename when the op...

Microsoft Internet Explorer 5 - INPUT TYPEFILE Remote File Upload

Microsoft Internet Explorer 5 - INPUT TYPEFILE Remote File Upload font size="3" color="white...

FreeBSD-SA-00:42.linux

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:42 Security Advisory FreeBSD, Inc. Topic: Linux binary compatability mode can cause system compromise Category: core Module: kernel Announced: 2000-08-28 Credits: Boris...

Big Brother filename extension vulnerability

versions affected: bb14h2 current and older exploit: bbd listens for incoming connections on port 1984. Using telnet or the bb client, it is possible to connect and create a filename with an arbitrary extension, as the extension is not rigorously checked. As this file is droped into a directory...

Kmail heap overflow

Hi When a letter sent to a kmail user has an attachment with long about 250 bytes long filename, kmail 1.0.28 segfaults. EIP does NOT get overwritten, only EAX. Dear gurus, is it exploitable? : Byez -- Lez [email protected] http://w3.swi.hu/lezli...

Microsoft IIS 4.0/5.0 - Malformed Filename Request

source: https://www.securityfocus.com/bid/1193/info Requesting a known filename with the extension replaced with .htr preceeded by approximately 230 "%20" which is an escaped character that represents a space from Microsoft IIS 4.0/5.0 will cause the server to retrieve the file and its contents...

Microsoft IIS 4.05.0 - Malformed Filename Request

Microsoft IIS 4.05.0 - Malformed Filename Request source: https://www.securityfocus.com/bid/1193/info Requesting a known filename with the extension replaced with .htr preceeded by approximately 230 "%20" which is an escaped character that represents a space from Microsoft IIS 4.0/5.0 will cause...

Securax Security Advisory: Windows98 contains a serious buffer overflow with long filenameextensions.

===================================================================== Securax-SA-02 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Ms Windows '95?/'98/SE explorer.exe causes a buffer overflow with long filename...

Microsoft Windows Server 2000/95/98/NT 4.0 - Long Filename Extension

// source: https://www.securityfocus.com/bid/1259/info Windows 95, 98, NT and 2000 suffer from a number of related buffer overflows that can result in a crash if a filename with an extension longer than 128 characters is accessed. Although arbitrary code could be executed via this manner, it woul...

Microsoft Windows Server 20009598NT 4.0 - Long Filename Extension

Microsoft Windows Server 20009598NT 4.0 - Long Filename Extension // source: https://www.securityfocus.com/bid/1259/info Windows 95, 98, NT and 2000 suffer from a number of related buffer overflows that can result in a crash if a filename with an extension longer than 128 characters is accessed...

scx-sa-02.txt

===================================================================== Securax-SA-02 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Ms Windows '95?/'98/SE explorer.exe causes a buffer overflow with long filename...

Microsoft FrontPage 98 Server Extensions for IIS Microsoft InterDev 1.0 - Filename Obfuscation

Microsoft FrontPage 98 Server Extensions for IIS Microsoft InterDev 1.0 - Filename Obfuscation source: https://www.securityfocus.com/bid/1108/info Two dlls dvwssr.dll and mtd2lv.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack include an obfuscation...

PT-2000-1256 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue allows attackers to cause a denial of service by accessing a file or directory with a long name. Recommendations: At the moment, there is no information about a newer version that...

Microsoft IIS 4.0 - Pickup Directory Denial of Service

source: https://www.securityfocus.com/bid/1819/info An email with a filename consisting of over 86 characters and an extension of .txt.eml will cause Microsoft IIS to crash if placed in the \mailroot\pickup directory. The process inetinfo.exe will crash, resulting in a Dr. Watson access violation...

SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation

SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation source: https://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the...

eudora.attachment.bof.txt

Date: Sat, 20 Mar 1999 02:21:35 -0500 From: whiz To: [email protected] Subject: Eudora Attachment Buffer Overflow I have found another problem with Eudora, attachments, and long filenames that is similar to the the problem I found last year. If two messages are sent to an Eudora 4.1 user that...

microsoft.wildcard.matches.txt

Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...

win98explorer.txt

Date: Mon, 9 Feb 1998 17:49:45 -0800 From: Scott To: [email protected] Subject: Another Windows98 Bug... I'm not sure about the details of this problem, but when testing another buffer overflow, I created a long filename called "testfile.txt " note the chr160's at the end It is 235 characters ...

mirc-hidden-files.txt

Date: Sat, 2 Jan 1999 06:15:04 -0500 From: Locke Nash Cole To: [email protected] Subject: Re: Win32 ICQ 98a flaw You can also do this in the popular mIRC IRC Client, althou it has no "Open" option so there is a less chance of the person running it, however in explorer "mypic..bmp .exe" Kinda...