Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service

// source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the 'RCPT TO:' field will crash the application upon terminati...

re: Re[4]: mailbox parsing problem in imap-4.7c

On Thu, 10 Aug 2000 22:22:27 +0400, 3APA3A wrote: sendmail contains mail.local. mail.local is MDA. At least BSD distributions use mail.local from sendmail. Well, we'll have to hear what the sendmail people say then. I still contend that all lines that are in "From " header format should be quoted...

Проблемы с SSL-сертификатами в IE

SSL-сертификат проверяется только при первом соединении с сервером, при этом для документов полученных через IMG и FRAME не проверяется дата устаревания сертификата и имя сервера...

Linux Kernel 2.2.122.2.142.3.99 (RedHat 6.x) - Socket Denial of Service

Linux Kernel 2.2.122.2.142.3.99 RedHat 6.x - Socket Denial of Service / source: https://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain...

Linux Kernel 2.2.12/2.2.14/2.3.99 (RedHat 6.x) - Socket Denial of Service

/ source: https://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain sockets, it is possible to cause a denial of service in some versions of th...

ftpd.dos.pl

Who has more free file descriptors & network ports, you or the ftp server ? ftpd's which limit connections to 1 per user@host or similar may have some defense against this, or if they don't support multiple data connections open at the same time. I suspect "many" is the number of ftpd's which are...

login_patch.txt

diff -ur ./util-linux-2.9o/lib/pathnames.h ./util-linux-2.9o-mp/lib/pathnames.h --- ./util-linux-2.9o/lib/pathnames.h Sun Oct 11 14:19:16 1998 +++ ./util-linux-2.9o-mp/lib/pathnames.h Wed Jul 14 22:51:13 1999 @@ -86,6 +86,7 @@ define PATHSECURE "/etc/securesingle" define PATHUSERTTY "/etc/usertty...

max_processes.txt

Subject: Re: limit maximum nr. of processes. To: [email protected] El dia Wed, Sep 01, 1999 at 10:53:48AM +0200, Petter Wahlman escribió: to limit the maximum number of processes you can use the Linux-PAM edit /etc/pam.d/login %PAM-1.0 auth required /lib/security/pamsecuretty.so auth...

linux.2.x.ipc.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Linux 2.x IPC vunerability Linux IPC implementation seems to be broken. I noticed Alan about one/two months ago, so I believe it has been fixed in recent 2.2.x Linuxes. In fact, any luser may consume whole memory available on system using...

foolproof.txt

Fooling Foolproof Security By Nightmare Foolproof security is a program that runs on a windows 9x box. The purpose of foolproof I guess is to keep people that don't know really know what they are doing from messing with stuff. It can be quite a annoying program if you are trying to do anything wi...

linux.2.x.mmap.DoS.txt

Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Linux 2.x mmap vunerability Linux 2.0.36 has the similiar problem with copy-on-write pages allocated with mmap - as these pages are not accounted within per-user limits. Fortunately, it's less harmfull than 5, because memory will be freed...

windows98.bof.txt

Date: Mon, 15 Feb 1999 17:59:13 -0500 From: Ervin Fried To: [email protected] Subject: Re: Win98 Buffer Overflow File attached my .02$: Explorer has bugs in handling files with pathname longer than or equal to the documented max and files with components that exceed other maximums. CreateFile...