CVE-1999-1343

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service hang via a long URL that contains a large number of . characters...

PT-1999-1852 · Yahoo · Yahoo Pager/Messenger

Name of the Vulnerable Software and Affected Versions: Yahoo Pager/Messenger client affected versions not specified Description: A buffer overflow issue exists, allowing remote attackers to cause a denial of service by sending a long URL within a message. Recommendations: At the moment, there is ...

CVE-1999-0012

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names...

CVE-1999-0281

Denial of service in IIS using long URLs...

CVE-1999-0182

This entry concerns Samba with a CVE-1999-0182 buffer overflow vulnerability that allows a remote attacker to obtain root access by supplying a long password. Affected component: Samba; vulnerability type: buffer overflow in handling long passwords. Documented impact states remote code execution ...

CVE-1999-0303

CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...

CVE-1999-0281

CVE-1999-0281 describes a denial-of-service issue in Microsoft IIS triggered by long URLs. Connected documents identify IIS as the affected product and reiterate the DoS impact but do not provide concrete technical details such as vulnerable components, root cause, affected versions, or a fix. A ...

CVE-1999-0224

Denial of service in Windows NT messenger service through a long username...

CVE-1999-0182

Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password...

Eicon Technology Diva LAN ISDN Modem login.htm Long password Field DoS

The remote host appears to be an Eicon Technology Diva LAN ISDN modem. Nessus crashed the modem by supplying a long password to the login page. This is likely due to a buffer overflow. A remote attacker could exploit this by repeatedly disabling the modem. C Tenable Network Security, Inc...

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...

win98explorer.txt

Date: Mon, 9 Feb 1998 17:49:45 -0800 From: Scott To: [email protected] Subject: Another Windows98 Bug... I'm not sure about the details of this problem, but when testing another buffer overflow, I created a long filename called "testfile.txt " note the chr160's at the end It is 235 characters ...

lotus-notes-smtp-DoS.txt

Date: Fri, 15 Jan 1999 00:52:53 PST From: Siva Sankar Adiraju To: [email protected] Subject: Lotus Notes SMTP Server bug There is a security bug in IBM's Lotus Notes SMTP server. eg. An SMTP session: helo a 250 notes.foo.com helo b 500 Session already established. The domain name b passed in...

microsoft.wildcard.matches.txt

Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...

eudora.attachment.bof.txt

Date: Sat, 20 Mar 1999 02:21:35 -0500 From: whiz To: [email protected] Subject: Eudora Attachment Buffer Overflow I have found another problem with Eudora, attachments, and long filenames that is similar to the the problem I found last year. If two messages are sent to an Eudora 4.1 user that...

SshdJJFen.txt

J.J.F. / Hackers Team - Security Advisory =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Date: 05/09/1999 Release: 05/14/1999 Author: Zhodiac URL: http://www.jjf.org Application: sshd2 up to 2.0.11 OS: Unix Risk: Risky :, long term could gain system access. -=-=-=-=-=-=-=-= Introduction...

ftpd.locate.findutils.txt

Date: Fri, 30 Apr 1999 11:07:20 +0300 From: Sergey V. Kolychev To: [email protected] Subject: Buffer overflow in ftpd and locate bug Hi. I had problem with locate from findutils-4.1.24.rpm from Redhat-5.1 It segfaults if we have huge directory at incoming ftp which created by exploits for ftpd...

nt.explorer.DoS.txt

Date: Thu, 11 Feb 1999 11:25:01 -0800 From: Clifford Hammerschmidt To: [email protected] Subject: NT too? Re: Another Windows98 Bug... The following perl script will create a 250 character file that will crash WinNT service pack 3 explorer when right-clicked on: -------------------- $fn = 'A' ...

CVE-1999-0770

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems...

CVE-1999-0224

Denial of service in Windows NT messenger service through a long username...