Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

Buffer overflows in Skyline/SpinBox client

There are some buffer overflows in SpinBox/1.1 from the spinserver.conf. SpinBox is an SSI/cgi-tool used by advertisement companies, made by Skyline. Since this is closed source software, I can't post the sources. The buffer overflows are mostly in the query string strcat and strcpy instead of...

CVE-2000-0165

CVE-2000-0165 affects the DeleGate proxy server, where the application is vulnerable to multiple remote buffer overflows. The available sources indicate that these overflows allow a remote attacker to execute arbitrary commands, potentially leading to denial of service or full code execution. A d...

FreeBSD-SA-00:08.lynx

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:08 Security Advisory FreeBSD, Inc. Topic: Lynx ports contain numerous buffer overflows Category: ports Module: lynx/lynx-current/lynx-ssl/ja-lynx/ja-lynx-current...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

// source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows 1 // source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3...

CVE-1999-0748

Buffer overflows in Red Hat net-tools package...

CVE-2000-0133

Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands...

CVE-1999-0688

Buffer overflows in HP Software Distributor SD for HPUX 10.x and 11.x...

CVE-1999-1334

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...

freebsd.seyon.txt

Vuln 1 The Seyon Mess To summarize: Seyon was supposedly not meant to run with additional privileges. There are numerous problems with seyon and I've probably not found all of them. They are: Buffer Overflows: 1. $HOME 2. seyon -emulator $BUF 3. seyon -modems $BUF 4. many long text box input stri...

CVE-2000-0165

The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands...

CVE-1999-0065

Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands...

suse6.2pbpg.txt

Brock Tellier [email protected] Sent: Thursday, September 16, 1999 5:06 PM Subject: Two SuSE 6.2 local root exploits Greetings, /usr/bin/pb and /usr/bin/pg, suid root by default on SuSE 6.2, allow any user to read any file on the system as shown: susebox:/root ls -la /usr/bin/pb uname -rwsr-xr-...

Linux_suse_exploits.txt

Subject: Two SuSE 6.2 local root exploits To: [email protected] Greetings, /usr/bin/pb and /usr/bin/pg, suid root by default on SuSE 6.2, allow any user to read any file on the system as shown: susebox:/root ls -la /usr/bin/pb uname -rwsr-xr-x 1 root root 23544 Jul 22 20:07 /usr/bin/pb...

CDE RPC tooltalk Service Multiple Overflows

The tooltalk RPC service is running. A possible implementation fault in the ToolTalk object database server may allow an attacker to execute arbitrary commands as root. This warning may be a false positive since the presence of this vulnerability is only accurately identified with local access. C...

ssh-1.2.26.txt

Date: 1 Nov 1998 20:43:19 -0000 From: [email protected] 01. ssh 1.2.26 vulnerability ---------------------------- As most of you are aware, the Rootshell site was compromised on October 28th. In order to keep the integrity of our investigation we have been fairly closed-lipped about...

ksrt.accelerated-x.bof.txt

Date: Sat, 26 Jun 1999 15:40:54 -0400 From: "KSRT Contact Account" To: [email protected] Subject: KSRT 011: Accelerated-X KSRT Advisory 011 Date: June 25, 1999 ID : accelx-bo-011 Affected Program: Xi Graphics, Inc.'s Accelerated-X Server 4.x, 5.x and possibly earlier versions. Author: Jordan...

ftp.serv-u.2.5.bof.txt

Date: Mon, 3 May 1999 06:16:38 +0200 From: Arne Vidstrom To: [email protected] Subject: Buffer overflows in FTP Serv-U 2.5 Hi, It looks like there are some buffer overflows in FTP Serv-U 2.5 the most recent version and I guess they are present in the versions before too, but I...

CA-99-03-FTP-Buffer-Overflows.txt

Date: Thu, 11 Feb 1999 18:17:10 -0500 From: CERT Advisory Reply-To: [email protected] To: [email protected] Subject: CERT Advisory CA-99.03 - FTP-Buffer-Overflows -----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-99-03-FTP-Buffer-Overflows Original issue date: February 11...