win98explorer.txt

Date: Mon, 9 Feb 1998 17:49:45 -0800 From: Scott To: [email protected] Subject: Another Windows98 Bug... I'm not sure about the details of this problem, but when testing another buffer overflow, I created a long filename called "testfile.txt " note the chr160's at the end It is 235 characters ...

SshdJJFen.txt

J.J.F. / Hackers Team - Security Advisory =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Date: 05/09/1999 Release: 05/14/1999 Author: Zhodiac URL: http://www.jjf.org Application: sshd2 up to 2.0.11 OS: Unix Risk: Risky :, long term could gain system access. -=-=-=-=-=-=-=-= Introduction...

CVE-1999-0770

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems...

CVE-1999-0224

Denial of service in Windows NT messenger service through a long username...

PT-1999-1018 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue is related to a denial of service in the Windows NT messenger service. This can be triggered through a long username. Recommendations: At the moment, there is no information...

Web Server Long URL Handling Remote Overflow DoS

The remote web server crashes when it receives a too long URL. It might be possible to make it execute arbitrary code through this flaw. C Tenable Network Security, Inc. Some vulnerable servers: SmallHTTP All versions vulnerable: 2.x Stables, 3.x Latest beta 8 OmniHTTPd v2.09 of Omnicron...

Lotus Notes SMTP Server HELO Command Overflow DoS

It was possible to perform a denial of service against the remote SMTP server by sending it two HELO commands followed by a too long argument. This allows an unauthenticated, remote attacker to deny service to legitimate users of the server. C Tenable Network Security, Inc. include"compat.inc";...

TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service

source: https://www.securityfocus.com/bid/1690/info Long commands ie., over 2048 bytes sent to TYPSoft FTP Server cab cause the server to hang, requiring a manual restart to restore the process. After the release of this advisory Noam Rathaus from http://www.BeyondSecurity.com contributed the...

TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service

TYPSoft FTP Server 0.7.x - FTP Server Remote Denial of Service source: https://www.securityfocus.com/bid/1690/info Long commands ie., over 2048 bytes sent to TYPSoft FTP Server cab cause the server to hang, requiring a manual restart to restore the process. After the release of this advisory Noam...

CVE-1999-0928

Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL...

Solaris 2.6/7.0/8 - 'netpr' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1200/info A buffer overrun exists in the 'netpr' program, part of the SUNWpcu LP package included with Solaris, from Sun Microsystems. Versions of netpr on Solaris 2.6 and 7, on both Sparc and x86 have been confirmed as being vulnerable. The overflow i...

CVE-1999-0686

Denial of service in Netscape Enterprise Server NES in HP Virtual Vault VVOS via a long URL...

CVE-1999-0222

Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL...

Ipswitch IMail 5.0/6.0 - Web Service Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/505/info The IMail web server can be crashed by requesting an abnormally long URL. Telnet to target machine, port 8383 Send: GET /glob1/ Where glob1 is 3000 characters. Marc Maiffret has released the following exploit:...

Ipswitch IMail 5.06.0 - Web Service Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.06.0 - Web Service Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/505/info The IMail web server can be crashed by requesting an abnormally long URL. Telnet to target machine, port 8383 Send: GET /glob1/ Where glob1 is 3000 characters. Marc Maiffre...

CVE-1999-1060

Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname...

WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/113/info There is a vulnerability in ProFTPD versions 1.2.0pre1 and earlier and in wu-ftpd 2.4.2 beta 18 VR9 and earlier. This vulnerability is a buffer overflow triggered by unusually long path names directory structures. For example, if a user has wri...

CVE-1999-0464

Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames...

PT-1999-1794 · Ncftp · Ncftpd

Name of the Vulnerable Software and Affected Versions: NcFTPd versions prior to 2.4.1 Description: The issue is caused by an off-by-one error in the NcFTPd FTP server, allowing a remote attacker to cause a denial of service crash via a long PORT command. Recommendations: For versions prior to...

PT-1998-1003 · Qpopper · Qpopper

Name of the Vulnerable Software and Affected Versions: qpopper affected versions not specified Description: The issue allows remote attackers to gain root access by exploiting a buffer overflow in POP servers. This can be achieved by using a long PASS command. Recommendations: At the moment, ther...