DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0007.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0008.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0007: Buffer Overrun in ITHouse Mail Server v1.04

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0003 : Buffer Overrun in NAI WebShield SMTP v4.5.44 Managem ent Tool

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 08/05/2000 [email protected]...

BUFFER OVERRUN VULNERABILITIES IN KERBEROS

-----BEGIN PGP SIGNED MESSAGE----- BUFFER OVERRUN VULNERABILITIES IN KERBEROS SUMMARY: Serious buffer overrun vulnerabilities exist in many implementations of Kerberos 4, including implementations included for backwards compatibility in Kerberos 5 implementations. Other less serious buffer overru...

Solaris 7.08 - Xsun Buffer Overrun

Solaris 7.08 - Xsun Buffer Overrun // source: https://www.securityfocus.com/bid/1140/info A buffer overrun vulnerability exists in the Xsun X11 server, as shipped as part of Solaris 7 and 8 from Sun Microsystems. By supplying a long argument to the -dev option normally used to set the output...

Solaris 7.0/8 - Xsun Buffer Overrun

// source: https://www.securityfocus.com/bid/1140/info A buffer overrun vulnerability exists in the Xsun X11 server, as shipped as part of Solaris 7 and 8 from Sun Microsystems. By supplying a long argument to the -dev option normally used to set the output device, it is possible to execute...

Re: another WU imapd buffer overflow

Hi again, imapd seems to be very weak. I've found another three buffer overruns. This time affected commands are LSUB, RENAME and FIND: OK mail IMAP4rev1 v12.264 server ready login siva9 secret OK LOGIN completed lsub "" AAAAAAAAAAAAA.... A 1024 - 8179 SIGSEGV received. OK localhost IMAP4rev1...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (2)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 2 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

Halloween Linux 4.0 / RedHat Linux 6.1/6.2 - 'imwheel' (2)

// source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a sufficiently long string containing machine executable code...

Halloween Linux 4.0 / RedHat Linux 6.1/6.2 - 'imwheel' (1)

// source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a sufficiently long string containing machine executable code...

CVE-1999-1094

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."...

ie5.vns.ms.radio.txt

This exploit does not seem to affect the version of Internet Exploder bundled with Windows Millennium Beta 2 build 4.90.2419. That version of IE is reported as 5.50.3825.1300, and the pertinent information for MSDXM.OCX is as follows: Version: 6.4.7.1028 Size: 843,536 bytes MSDXM.OCX is a...

[SECURITY] New version of proftpd fixes remote exploits

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 11, 1999 - ------------------------------------------------------------------------ The proftpd version that was...

windows_phonedialer_bof.txt

Subject: Alert: Microsoft's Phone Dialer contains a buffer overrun that allows execution of arbitary code To: [email protected] Microsoft's Phone Dialer on Windows NT 4 all service packs contains a buffer overrun vulnerability that allows an attacker to run arbitary code in another user's...

ntbufferoverruns.txt

Exploiting Windows NT 4 Buffer Overruns A Case Study: RASMAN.EXE Introduction This document is for educational purposes only and explains what a buffer overrun is and shows how they can be exploited on the Windows NT 4 operating system using RASMAN.EXE as a case study. We will take a look at...

irixat.txt

Date: Fri, 3 Jul 1998 22:14:14 +0200 From: "J.A. Gutierrez" Subject: more about 'at' I've tried the trick from NetBSD Security Advisory 1998-004 on an IRIX 6.2 host, and it seems it works too. $ at -f /etc/shadow now + 1 minute - shadow is mailed to user: 'at' is: f 23947 91...