1320 matches found
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...
SRT Security Advisory (SRT2002-06-04-1011): slurp
====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-04-1011 Topic : Slurp news retriever remote format string vulnerability Date : June 04, 2002 Credit : zillionatsafemode.org Site : http://www.snosoft.com...
Matu FTP 1.74 - Client Buffer Overflow
source: https://www.securityfocus.com/bid/4572/info An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a Matu FTP client. If,upon user connection, a FTP server '220' response is of excessive length, a stack-based overflow condition could occur. Th...
CVE-2001-1056
IRC DCC helper in the ipmasqirc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid...
Apple QuickTime 5.0 - Content-Type Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/4064/info Apple QuickTime is a freely available media player. It runs on a number of platforms including MacOS and Windows 9x/ME/NT/2000/XP operating systems. Apple QuickTime For Windows does not perform sufficient bounds checking of the "Content-Type"...
MIRC 2.x/3.x/4.x/5.x - Nick Buffer Overflow
// source: https://www.securityfocus.com/bid/4027/info mIRC is a popular Internet Relay Chat client whichs runs of Microsoft Windows 9x/ME/NT/2000/XP operating systems. A remote exploitable buffer overflow condition has been discovered in mIRC. This issue is due to improper bounds checking of...
Stunnel: Format String Bug in versions <3.22
Don't know why this didn't get approved when I submitted it last week, but here goes again... Release Date: 2001-Dec-22 Package: stunnel Versions: stunnel-3.3 = stunnel-3.21c Problem type: format string bugs Exploit script: none currently known Severity: high Network-accessible: yes Discovery:...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
Win2k Telnet.exe malicious server vulnerability
/ NTLM telnetD v0.8 Snarfs NTLM challenge/response by convincing w2k telnet client to auto-authenticate. Outputs auth-data in LophtCrack sniff format on stdout. compile: gcc -o w2kteld ntlmtelnetd.c run: ./w2kteld Then wait for w2k to telnet to you. for the impatient, there are always ways of...
CVS Kit CVS Server 1.10.8 - Instructed File Create
source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be tested yourself as follows. Although this example ru...
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...
CVE-1999-0858
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery WPAD server...
CVE-1999-0858
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery WPAD server...
CVE-1999-0097
The CVE-1999-0097 entry concerns the AIX FTP client, where a malicious FTP server can force execution of shell commands on the client via metacharacters (for example, a pipe). The issue is documented across multiple sources (NVD, CVE list) and is consistent with historical CERT/Red Hat advisories...
CVE-1999-0302
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server...
CVE-1999-0097
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters e.g. a pipe character...
CVE-1999-0302
CVE-1999-0302 affects SunOS/Solaris FTP clients. A malicious FTP server can coerce the client into executing arbitrary commands, a network-accessible issue with no authentication required. This can impact confidentiality, integrity, and availability as per the CVSS description (base score 7.5, HI...
PT-1998-1082 · Palace · Palace
Name of the Vulnerable Software and Affected Versions: Palace affected versions not specified Description: A malicious server can force a client to execute arbitrary programs. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...