[SAFER] Security Bulletin 010123.EXP.1.10

S.A.F.E.R. Security Bulletin 010123.EXP.1.10 TITLE : Buffer overflow in Lotus Domino SMTP Server DATE : January 23, 2001 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Lotus Notes/Domino 5 up to and including 5.05 PROBLEM: Buffer overflow exists in Lotus Domino SMTP server, which...

wwwwais QUERY_STRING Parameter Remote Overflow

The 'wwwwais' CGI is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

tinyproxy tinyproxy 1.3.21.3.3 - Remote Heap Overflow

tinyproxy tinyproxy 1.3.21.3.3 - Remote Heap Overflow // source: https://www.securityfocus.com/bid/2217/info Versions 1.3.2 and 1.3.3 of tinyproxy, a small HTTP proxy, exhibit a vulnerability to heap overflow attacks. A failure to properly validate user-supplied input which arguments a call to...

Caldera Systems Security Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: security problems in dhcp Advisory number: CSSA-2001-003.0 Issue date: 2001 January, 12 Cross reference: 1. Problem Description The DHCP server and client shipped as part of OpenLinux had security...

Buffer Overflow still exists in Netscape <= 4.76

Hello. I have noticed that the buffer overflow discovered by Michal Zalewski and covered extensively by the different unix distributions is still present in netscape 4.76 even though they claim it is not. Refer to these links for background information:...

Дырка в NetScreen

Переполнение буфера при длинной URL в Web-интерфейсе...

CVE-2000-1175

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument...

1st Up Mail Server v4.1 Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1st Up Mail Server v4.1 Buffer Overflow Vulnerability USSR Advisory Code: USSR-2000058 Public Disclosure Date: December 25, 2000 Vendors Affected: Upland Ltd http://www.upland.co.uk/ Systems Affected: 1st Up Mail Server v4.1 Problem: The Ussr Team has...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

oops WWW Proxy Server Reverse DNS Response Overflow

The remote server appears to be running ooops WWW proxy server version 1.4.6 or older. Such versions are reportedly affected by a buffer overflow vulnerability. A remote attacker might exploit this vulnerability to crash the server or execute arbitrary commands on the remote system. C Tenable...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

Oops Proxy Server 1.4.22 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...

expect (/usr/bin/expect) buffer overflow

Exploit for linux platform in category local exploits ======================================== expect /usr/bin/expect buffer overflow ======================================== / hhp-expectsmash.c 12/11/00 expect /usr/bin/expect buffer overflow. Tested 5.31.8 and 5.28.1, slackware 7.x Maybe others...

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xp_displayparamstmt Buffer Overflow

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xpdisplayparamstmt Buffer Overflow // source: https://www.securityfocus.com/bid/2030/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow...

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xp_peekqueue Buffer Overflow

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xppeekqueue Buffer Overflow // source: https://www.securityfocus.com/bid/2040/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow...

HP-UX FTPD Remote Buffer Overflow Exploit

Exploit for hp-ux platform in category dos / poc ========================================= HP-UX FTPD Remote Buffer Overflow Exploit ========================================= / theoretical exploit for hpux ftpd vulnerability / / not tested anywhere, needs tweaking / / c 2000 by babcia padlina ltd...

Microsoft SQL Server 7.0/2000 / Data Engine 1.0/2000 - xp_showcolv Buffer Overflow

// source: https://www.securityfocus.com/bid/2038/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow vulnerability which may cause the application to fail or arbitrary code to be executed o...

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xp_showcolv Buffer Overflow

Microsoft SQL Server 7.02000 Data Engine 1.02000 - xpshowcolv Buffer Overflow // source: https://www.securityfocus.com/bid/2038/info The API Srvparaminfo, which is implemented by Extended Stored Procedures XPs in Microsoft SQL Server and Data Engine, is susceptible to a buffer overflow...

CVE-2000-1021

Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...

Дырка в Koules

Переполнение буфера при разборе аргументов...

Microsoft Media Player .ASX parser buffer overflow (win98, others?)

It bugs as hell. A valid ASX file to be opened in Microsoft Media Player 6.4x: ASX version = "3.0" Entry Ref href="anasf.asf" /Entry /ASX Make any keyword longer than 21000 characters and you've got it. Not too easy to exploit though.. prove your skills ; Get Your Private, Free E-mail from MSN...