1903 matches found
CVE-2004-1782
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...
Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (3)
Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 3 / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / include include include include // bind 4444 unsigned char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...
WS_FTP Server <= 5.03 (RNFR) Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc ==================================================== WSFTP Server WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)
SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open Microsoft Windows 2000 Version 5.00.2195 C...
BlackJumboDog buffer overflow
Buffer overflow in FTP PASS command...
nCipher netHSM information leak
Pass phrases entered by means of the nCipher netHSM front panel, either using the built in thumbwheel or using a directly attached keyboard, are exposed in the netHSM system log...
nCipher Advisory #10: Pass phrases are exposed in netHSM log files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 nCipher Security Advisory No. 10 Pass phrases are exposed in netHSM log files -------------------------------------------- SUMMARY ======= Pass phrases entered by means of the nCipher netHSM front panel, either using the built in thumbwheel or using a...
ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issu...
Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow
Xlight FTP Server 1.251.41 - PASS Remote Buffer Overflow source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable softwar...
Xlight FTP Server 1.25/1.41 - 'PASS' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents itself when an attacker sends a...
Buffer overflow in MatuFtpServer
Buffer overflow in PASS command...
Lotus Domino View ACL by-pass (#NISR29102001C)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino View ACL by-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Possibly high Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Advisory number:...
CVE-1999-0759
The CVE-1999-0759 entry concerns FuseMAIL POP service vulnerable to a buffer overflow triggered by long USER and PASS commands. Connected sources confirm the affected component (FuseMAIL POP service) and the root cause (buffer overflow) with CVSS details indicating a high-severity, network-expose...
CVE-1999-0759
Buffer overflow in FuseMAIL POP service via long USER and PASS commands...
HP-UX FTP Daemon PASS Command Remote Format String
The remote ftp server does not sanitize properly the argument of the PASS command it receives for anonymous accesses. It may be possible for a remote attacker to gain shell access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies
Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user...
Cat Soft Serv-U FTP Server 2.5a - SITE PASS Denial of Service
source: https://www.securityfocus.com/bid/859/info If the Serv-U FTP server receives an overly long argument to the SITE PASS command, it will crash. To issue this command, an attacker must be already logged in as an authenticated user, including an 'anonymous' user...
CVE-1999-0759
Buffer overflow in FuseMAIL POP service via long USER and PASS commands...
Microsoft Windows NT 4.0 SP5 / Terminal Server 4.0 - 'Pass the Hash' with Modified SMB Client
source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need for the user to "decrypt" the...