9003 matches found
CVE-2000-0584
Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SRINIT command with a long user name or group name...
NetcPlus BrowseGate 2.80 - Denial of Service
NetcPlus BrowseGate 2.80 - Denial of Service source: https://www.securityfocus.com/bid/1702/info NetcPlus BrowseGate 2.80 will crash as the result of an invalid read error if a number of character strings consisting of 8 KB are inserted into GET request arguments through port 80. For example: GET...
Profile overwrite/delete due to registry size limit.
All, We have discovered a bug with NT v4.0-SP6a registry size growth and overwriting of user profiles. This bug was exposed when the SMS v2.0-SP2 client runs into a condition where it continually creates new registry keys and values filling the system registry with thousands of crap entries - thu...
Lockdown vulnerability - All versions
Release Date: May 4, 2000 Systems Affected: All machines running Lockdown Corporation's Lockdown AntiTrojan program ALL VERSIONS. Tested under Windows98. Results may vary under different operating systems, but all are vulnerable to the same problem. THE PROBLEM Lockdowns main display textbox can...
CVE-1999-1074
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking...
PT-1999-1646 · Dec · Openvms
Name of the Vulnerable Software and Affected Versions: Open VMS versions 5.3 through 5.5-2 Description: The issue allows attackers to conduct brute force password guessing due to improper disabling of access to user accounts that exceed the break-in limit threshold for failed login attempts. This...
CVE-1999-1548
Cabletron SmartSwitch Router SSR 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit...
Dick Lin ZetaMail 2.1 - Login Denial of Service
Dick Lin ZetaMail 2.1 - Login Denial of Service source: https://www.securityfocus.com/bid/813/info The ZetaMail mail server will crash if a username/password pair longer than 3500 characters is supplied by the client. 19636-1.exe - binary for windows 19636-2.zip - source for windows 19636-3.tgz -...
WFTPD 2.342.403.0 - Remote Buffer Overflow (PoC)
WFTPD 2.342.403.0 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/747/info WFTPD is reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient bounds checking performed on MKD and CWD arguments. It is reported that superfluous dat...
aass_patch.txt
--- aass-old.c Mon Jul 26 20:45:46 1999 +++ aass.c Mon Jul 26 21:54:47 1999 @@ -1,5 +1,5 @@ / - The AntiAntiSniffer Sniffer by Mike Perry + The AntiAntiSniffer Sniffer v0.2 by Mike Perry To all my friends, coworkers, and associates who thought I knew better than to do something like this, please...
linux_segment_limit_bug.txt
Subject: Linux 2.0.37 segment limit bug To: [email protected] Hello, Linux 2.0.37 released last month introduces the support for more than 1 GB of physical memory on x86 which wasn't supported in earlier 2.0 kernels. It is now possible to increase the limit, at the expense of reducing the...
patch_for_ipc_vuln.txt
Subject: Re: KKIS19990914.004b: ShareDream - shared memory - ipc vulnerability To: [email protected] Attached is a trivial Linux-2.2.12 patch wich adds add a procfs entry for tuning the limit of shared memory allocable. /proc/sys/kernel/shmmax Max number of shared memory pages Attached is...
ProFTPd 1.2 pre1pre2pre3pre4pre5 - Remote Buffer Overflow (2)
ProFTPd 1.2 pre1pre2pre3pre4pre5 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/612/info The vulnerability in 1.2pre1, 1.2pre3 and 1.2pre3 is a remotely exploitable buffer overflow, the result of a sprintf in the logxfer routine in src/log.c. The vulnerability in 1.2pre4 ...
mimeflood.pl
Date: Thu, 3 Sep 1998 12:34:22 +0200 From: Laurent FACQ Subject: Web servers / possible DOS Attack / mime header flooding ! /bin/perl mimeflood.pl - 02/08/1998 - L.Facq [email protected] Web servers / possible DOS Attack / "mime header flooding" looking at the apache 1.2.5 source code i found th...
ProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/612/info The vulnerability in 1.2pre1, 1.2pre3 and 1.2pre3 is a remotely exploitable buffer overflow, the result of a sprintf in the logxfer routine in src/log.c. The vulnerability in 1.2pre4 is a mkdir overflow. The name of the created path can not...
tetrix.1.13.16.bof.txt
Date: Wed, 17 Feb 1999 13:03:45 -0800 From: Steven Hodges To: [email protected] Subject: Tetrix 1.13.16 is Vulnerable I have recently found a buffer overflow in a TetriNet daemon for Linux called "Tetrix". To exploit this bug, you will need a hostname longer than 122 characters, and any method...
slmail-smash.txt
Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...
mail.local.diff
688a689,698 define MAXMSGLEN 65536 / Make sure message is less than MAXMSGLEN / if ftellfp MAXMSGLEN syslogLOGDEBUG,"Message too long - %i bytes limit is %i\n", ftellfp,MAXMSGLEN; exit1;...
CVE-1999-1518
Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits e.g., as specified with rlimits using mmap or shmget to allocate memory and cause page faults...