geoHTTP.txt

Software: GeoHttpServer Vendor: GEOVISION INC http://www.geovision.com.tw Versions: ALL Platforms: Unix Bug: Authentification Bypass Vulnerability & D.O.S Denial Of Service Risk: High Exploitation: Remote with browser Date: 22 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected]...

Apple QuickTime/Darwin Streaming Server integer overflow in MP3Broadcaster utility

Overview Apple's QuickTime and Darwin Streaming Server DSS package includes a utility called MP3Broadcaster. This utility contains an integer overflow which may be exploited to cause a denial of service. Description Apple's QuickTime and Darwin Streaming Server is software which provides integrat...

NOVL-2003-2966549 - Enterprise Web Server PERL Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2003-2966549 Title: Enterprise Web Server PERL Handler Buffer Overflow Date: 23-Jul-2003 Revision: Original Product Name: Netware...

NOVL-2003-2966205 - iChain 2.2 Field Patch 1a

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2003-2966205 Title: iChain 2.2 Field Patch 1a Date: 05-Jun-2003 Revision: Original Product Name: iChain 2.2 OS/Platforms: Netware...

CuteFTP: buffer overflow

Damage Hacking Group security advisory www.dhgroup.org Product: CuteFTP client Authors: GlobalSCAPE Inc. www.globalscape.com Vulnerable versions: v.4. Vulnerability: buffer overflow Overview-------------------------------------------------------------- "CuteFTP is a Windows based File Transfer...

IPSwitch, Inc. WS_FTP Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: IPSwitch, Inc. WSFTP Server Versions: v3.13 dated 2002.08.07, possibly others. Severity: Medium-Hot Author: low halo [email protected] Date: October 25th, 2002 Revision: 1.0 Overview WSFTP v3.13 by IPSwitch, Inc., is vulnerable to the...

CVE-2002-1128

Technical details about CVE-2002-1128 are not publicly available in the provided connected documents; available sources reiterate a buffer overflow in the inc mail utility for Compaq Tru64/OSF1 3.x via a long MH environment variable.

NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963297 Title: NetBasic Buffer Overflow + Scripting Vulnerability Date: 20-Aug-2002 Revision: Original Security Alert Product Name...

CVE-2001-0563

CVE-2001-0563 affects ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier. The flaw allows a remote attacker to induce a denial of service by sending large strings (greater than 160,000 characters) to port 23. The available sources (NVD, CVE listings) corroborate the DoS impact but do not...

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript

source: https://www.securityfocus.com/bid/2814/info O'Reilly WebBoard is a conferencing utility, forum, threaded discussion and real-time chat server. Versions of WebBoard are vulnerable to a JavaScript code execution bug which may allow a remote denial of service against a target WebBoard user's...

Security Bulletin MS01-017

---------------------------------------------------------------------- Title: Erroneous VeriSign-Issued Digital Certificates Pose Spoofing Hazard Date: 22 March 2001 Software: All Microsoft customers should read the bulletin. Impact: Attacker could digitally sign code using the name "Microsoft...

REVISION: @stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please note revision section below @stake Inc. www.atstake.com Security Advisory Advisory Name: NetDDE Message Vulnerability Release Date: 02/05/2001 Updated on 2/08/2001 Application: Network DDE system component Platform: Windows 2000 up to and...

Technote 20002001 - Filename Command Execution File Disclosure

Technote 20002001 - Filename Command Execution File Disclosure source: https://www.securityfocus.com/bid/2156/info Technote Inc. offers a multi-communication Package that includes a web board type of service. A script that ships with Technote, 'main.cgi', accepts a parameter called 'filename'. Th...

BSDi 3.0 inc - Local Buffer Overflow Local Privilege Escalation

BSDi 3.0 inc - Local Buffer Overflow Local Privilege Escalation / BSDiincmh buffer overflow, by [email protected]. this is will give you euid=0root on BSDi/3.0 systems. / define PATH "/usr/contrib/mh/bin/inc" / path to inc on BSDi/3.0 / define BUFFER 2048 / no need to change this. / define...

BSDi 3.0 inc - Local Buffer Overflow / Local Privilege Escalation

/ BSDiincmh buffer overflow, by [email protected]. this is will give you euid=0root on BSDi/3.0 systems. / define PATH "/usr/contrib/mh/bin/inc" / path to inc on BSDi/3.0 / define BUFFER 2048 / no need to change this. / define DEFAULTOFFSET -7000 / generalized offset. / static char exec=...

Rideway PN Telnet DoS

Strumpf Noir Society Advisories ! Public release ! -- -= Rideway PN Telnet DoS =- Release date: Tuesday, November 14, 2000 Introduction: RideWay PN is a proxy server application that enables multiple users to share resources and files and that allows users to access the Internet simultaneously...

Kootenay Web Inc whois 1.0 - Remote Command Execution

Kootenay Web Inc whois 1.0 - Remote Command Execution source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to...

Kootenay Web Inc whois 1.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a linux server. Due to a failure to...

CVE-1999-0358

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...

CVE-1999-0358

Summary: CVE-1999-0358 affects Digital Unix 4.0 with a buffer overflow in the inc program of the mh package. The connected documents (e.g., Red Hat CVE entry and related records) reiterate the same description without providing concrete exploit details, affected version ranges beyond Digital Unix...