Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow

/--oopz.c---//-------------r-3-m-0-t-3---------------\------------- TARGET : oops-1.4.6 one russi4n proxy-server CLASS : remote 0S : FreeBSD 4.0 - 2 AUTH0R : diman VEND0R : wanna payment for support. I'm not doing his job, yeh? DATE : 7-11-2k N0TE : xploit was coded for fun only. GREETS : &y, fm,...

Дырки в прокси-сервере OOPS

Несколько переполнений буфера кучи и стека...

[pkc] remote heap buffer overflow in oops

pkc001.txt --- Packet Knights Advisory 001 --- http://www.pkcrew.org Author : |CyRaX| [email protected] Application : Oops proxy server 1.4.22 1.4.6 and maybe prior Type: heap buffer overflow --- The problem --- Function listparser in ftputils.c : line is the line sent by the ftp server in result ...

oops WWW Proxy Server Reverse DNS Response Overflow

The remote server appears to be running ooops WWW proxy server version 1.4.6 or older. Such versions are reportedly affected by a buffer overflow vulnerability. A remote attacker might exploit this vulnerability to crash the server or execute arbitrary commands on the remote system. C Tenable...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

Oops Proxy Server 1.4.22 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...

KTH Kerberos 4 - Arbitrary Proxy Usage

KTH Kerberos 4 - Arbitrary Proxy Usage source: https://www.securityfocus.com/bid/2090/info Kerberos is a widely used network service authentication system. The version of Kerberos developed and maintained by KTH Swedish Royal Institute of Technology contains a vulnerability that may allow/assist ...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)

Oops Proxy Server 1.4.22 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...

AnalogX Proxy Server Buffer Overflow Vulnerability

From "zer0-logic" [email protected]: Network Security Solutions Inc. Security Advisory Philippine based Security Company Http://www.nssolution.net Http://connect.to/nssi AnalogX Proxy Server DoS/Buffer Overflow Vulnerabilty Author: Abraham Lincoln H. Handle: zer0logic Email :...

analogx-4.10.dos.txt

Network Security Solutions Inc. Security Advisory Philippine based Security Company Http://www.Nssolution.net Http://connect.to/nssi AnalogX Proxy Server DoS/Buffer Overflow Vulnerabilty Author: Abraham Lincoln H. Handle: zer0logic Email : [email protected], [email protected]...

Проблемы в Browsegate

Длинное поле Referer HTTP-запроса приводит к переполнению буфера в прокси-сервере. Кроме того, пароли хранятся в тривиальной кодировке допускающей обратное преобразование...

Rideway PN Telnet DoS

Strumpf Noir Society Advisories ! Public release ! -- -= Rideway PN Telnet DoS =- Release date: Tuesday, November 14, 2000 Introduction: RideWay PN is a proxy server application that enables multiple users to share resources and files and that allows users to access the Internet simultaneously...

csm.proxy.bypass.txt

Hi there! Something which might be worth a note... we are using csm´s proxy server and it´s siteblocker feature which is an option to enable url-filtering...BUT...if you surf to an "outside" proxy e.g. spaceproxy you can bypass url filtering by siteblocker due to a imho "design flaw" in the parsi...

CVE-2000-0658

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol...

CVE-2000-0657

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...

CVE-2000-0656

CVE-2000-0656 : Affected product is AnalogX Proxy Server (version 4.04 and earlier). The vulnerability is a buffer overflow caused by a long USER command in the FTP protocol, enabling remote attackers to cause a denial of service. The connected documents confirm the impact as denial of service; n...

CVE-2000-0659

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request...

CVE-2000-0656

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol...

CVE-2000-0657

The vulnerability CVE-2000-0657 affects AnalogX Proxy Server versions 4.04 and earlier. It is a buffer overflow triggered by a long HELO command in SMTP, leading to a remote-denial of service. The provided documents do not include a remediation or a confirmed exploit status. No further technical ...