Robo-FTP Pre-authentication Command Execution DoS

The remote host seems to be running Robo-FTP. According to its banner, this version has a denial of service vulnerability. Sending certain commands to the service before authentication has been negotiated causes the service to crash. This script was written by Audun Larsen Changes by Tenable: - u...

Dell OpenManage Web Server Heap Overflow

Product: Dell OpenManage Web Server 3.4.0 and others assumed vulnerable. Vulnerability: Pre-Authentication Heap Based Buffer Overflow Severity: High Risk Status: Vendor notified but security contact on vacation. Support also contacted but believed our issue is related to our hard drive being full...

CVE-2003-1030

DameWare Mini Remote Control is affected by a pre-authentication buffer overflow in the service listening on TCP 6129, allowing remote code execution. The issue affects versions before 3.73; remediation is to upgrade to 3.73.0.0 or later. The connected Nessus data confirms remote exploitation via...

DameWare Mini Remote Control Server <= 3.72 Buffer Overflow

Product: DameWare Mini Remote Control = 3.72.0.0 Vulnerability: Pre-Authentication Buffer Overflow Severity: High Risk Status: Vendor responded very quickly and has resolved the issue in 3.73 and later. The new version can be downloaded from http://www.dameware.com/downloads. Description: A buffe...

DameWare Mini Remote Control Server 3.7x - Buffer Overflow (2)

DameWare Mini Remote Control Server 3.7x - Buffer Overflow 2 // source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain...

DameWare Mini Remote Control Server 3.7x - Buffer Overflow (3)

DameWare Mini Remote Control Server 3.7x - Buffer Overflow 3 // source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain...

DameWare Mini Remote Control Server 3.7x - Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts using the vulnerable software. ...

LSH 1.x - Remote Buffer Overflow (2)

LSH 1.x - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable...

LSH 1.x - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable pre-authentication. Successful exploitation could...

LSH 1.x - Remote Buffer Overflow (1)

LSH 1.x - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable...

LSH 1.x - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable pre-authentication. Successful exploitation could...

Cyrus IMAP pre-authentication heap overflow vulnerability

In December 2002, Timo Sirainen reported: Cyrus IMAP server has a remotely exploitable pre-login buffer overflow. ... Note that you don't have to log in before exploiting this, and since Cyrus runs everything under one UID, it's possible to read every user's mail in the system. It is unknown...