@stake Advisory: DocumentDirect for the Internet (A090800-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The vulnerability documented in this advisory is remotely exploitable yet we are releasing it on a Friday. We don't see this as adding any additional risk to DocumentDirect customers. The vendor, Mobius, has assured us that they have contacted all the...

[SECURITY] New version of xchat released

Package : xchat Problem type : remote exploit Debian-specific: no The version of X-Chat that was distributed with Debian GNU/Linux 2.2 has a vulnerability in the URL handling code: when a user clicks on a URL X-Chat will start netscape to view its target. However it did not check the URL for shel...

Simple Web Counter swc ctr Parameter Remote Overflow

The CGI 'swc' Simple Web Counter is present and vulnerable to a buffer overflow when issued a too long value to the 'ctr=' argument. An attacker may use this flaw to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael...

HPUX FTPd vulnerability

Hello, I have discovered HPUX ftpd remote vulnerability. The problem persists in using vsprintf without format string. Example: 220 xxx FTP server Version 1.7.212.2 Tue Apr 21 12:14:46 GMT 1998 ready. user ftp 331 Guest login ok, send ident as password. pass .1030d 230 Guest login ok, access...

FreeBSD-SA-00:26.popper

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:26 Security Advisory FreeBSD, Inc. Topic: popper port contains remote vulnerability REVISED Category: ports Module: popper Announced: 2000-07-05 Revised: 2000-07-11...

Fun with UltraBoard V1.6X

hola friends, found some interesting things in the "old" UltraBoard-Forum scripts UltraBoard V 1.6 class:Input Validation Error remote:Yes vulnerable:UltraBoard V1. vendor: www.ultrascripts.com || www.ub2k.com Description: By using the good old NullByte000 its possible to open "any" file on the...

3R Soft MailStudio 2000 2.0 - userreg.cgi Arbitrary Command Execution

3R Soft MailStudio 2000 2.0 - userreg.cgi Arbitrary Command Execution // source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string...

WebSpeed Messenger Administration Utility Unauthenticated Access

The remote web server appears to be using Webspeed, a website creation language used with database-driven websites. The version of Webspeed installed on the remote host allows anonymous access to the 'WSMadmin' utility, which is used configure Webspeed. An attacker can exploit this issue to gain...

CVE-1999-0562

The registry in Windows NT can be accessed remotely by users who are not administrators...

PT-2000-1090 · Salescart · Salescart

Name of the Vulnerable Software and Affected Versions: SalesCart affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the SalesCart shopping cart application. Recommendations: At the moment, there is no...

CommuniGate Pro HTTP Configuration Port Remote Overflow

The remote host appears to be running Communigate Pro, a commercial email and groupware application. It was possible to crash this service by : - First, connecting to port 8010 and sending 70 KB of data AAA...AAA followed by '\r '. - Then, connecting to port 25. A remote attacker could exploit th...

XtraMail SMTP HELO Command Remote Overflow

The remote host is running a version of XtraMail with a remote buffer overflow vulnerability. The overflow is caused by by issuing the 'HELO' command, followed by a long argument. The HELO command is typically one of the first commands required by a mail server. The command is used by the mail...

Trend Micro Interscan VirusWall 3.2.33.3 - HELO Remote Buffer Overflow (2)

Trend Micro Interscan VirusWall 3.2.33.3 - HELO Remote Buffer Overflow 2 source: https://www.securityfocus.com/bid/787/info There is a buffer overflow in the HELO command of the smtp gateway which ships as part of the VirusWall product. This buffer overflow could be used to launch arbitrary code ...

WFTPD 2.34/2.40/3.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/747/info WFTPD is reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient bounds checking performed on MKD and CWD arguments. It is reported that superfluous data passed to MKD first and then to CWD results i...

Avirt Gateway Suite 3.3 a/3.5 - Mail Server Buffer Overflow (2)

source: https://www.securityfocus.com/bid/755/info The Avirt Mail Server 3.3a and 3.5 packages are vulnerable to a remote buffer overflow vulnerability. The buffer overflow can be initiated by passing 856 characters in the password field. source: https://www.securityfocus.com/bid/755/info The Avi...

Avirt Gateway Suite 3.3 a/3.5 - Mail Server Buffer Overflow (1)

source: https://www.securityfocus.com/bid/755/info The Avirt Mail Server 3.3a and 3.5 packages are vulnerable to a remote buffer overflow vulnerability. The buffer overflow can be initiated by passing 856 characters in the password field...

Eicon Networks DIVA LAN ISDN Modem 1.0 Release 2.5/1.0/2.0 - Denial of Service

source: https://www.securityfocus.com/bid/665/info A vulnerability in the Diva LAN ISDN Modem allows remote malicious users to lock up the modem requiring a hard reset. The vulnerability manifests itself when a remote users connects to the Diva HTTP port and sends a GET request of the form...

pop2d.imap.txt

Date: Wed, 26 May 1999 20:37:13 +0100 From: Chris Evans To: [email protected] Subject: Remote vulnerability in pop2d Hi Firstly, sorry if any details are hazy - this is from memory it's two months since I last looked at this. This bug concerns the pop-2 daemon, which is a part of the Washingto...

NCSA Campas cgi-bin Arbitrary Command Execution

The remote web server appears to be NCSA httpd. This version of the web server comes with a sample CGI script, campas, that fails to properly sanitize user input. This could allow a remote attacker to execute arbitrary commands with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...

IMail IMonitor Service Remote Overflow

The remote host appears to be running IMail IMAP server.The installed version is reportedly affected by a buffer overflow vulnerability in the IMonitor. An attacker could exploit this flaw in order to cause a denial of service or potentially execute arbitrary code subject to the privileges of the...