Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow

Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow // source: https://www.securityfocus.com/bid/4998/info IRCIT is a terminal based IRC client for Linux and Unix systems. IRCIT contains a remote buffer overflow vulnerability. When a INVITE message is received, the supplied from user da...

Dynamic Guestbook V3.0 Cross Site Scripting and Arbitrary Command Execution under certain circumstances

------------------------------------------------------------- itcp advisory 7 [email protected] http://www.it-checkpoint.net/advisory/7.html April 3rd, 2002 ------------------------------------------------------------- Dynamic Guestbook V3.0 Cross Site Scripting and Arbitrary Command...

ISS Advisory: Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon

Internet Security Systems Security Advisory April 3, 2002 Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon Synopsis: Internet Security Systems ISS X-Force has discovered a buffer overflow in the SNMP Simple Network Management Protocol daemon in the SGI IRIX operating system. The SNMP...

Squid FTP URL Special Character Handling Remote Overflow

The remote squid caching proxy, according to its version number, is vulnerable to various buffer overflows. An attacker may use these to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[SECURITY] [DSA 124-1] New mtr packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 124-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2002 - -------------------------------------------------------------------------- Package : mtr...

[SECURITY] [DSA 124-1] New mtr packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 124-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2002 - -------------------------------------------------------------------------- Package : mtr...

[SECURITY] [DSA 120-1] New mod_ssl and Apache/SSL packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 120-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2002 - -------------------------------------------------------------------------- Package :...

[SECURITY] [DSA 120-1] New mod_ssl and Apache/SSL packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 120-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2002 - -------------------------------------------------------------------------- Package :...

IBM DB2 Multiple CGI Single Byte Request Remote DoS

It was possible to crash the IBM DB2 database service by connecting to the affected service and sending just one byte to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10871; scriptversion"1.23";...

[SECURITY] [DSA 117-1] New CVS packages fix potential security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 117-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : cvs Vulnerability...

[SECURITY] [DSA 116-1] New CFS packages fix security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 116-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 - -------------------------------------------------------------------------- Package : cfs Vulnerability...

xtell 2.6.1 - User Status Remote Information Disclosure

source: https://www.securityfocus.com/bid/4196/info xtell is a simple network messaging program. It may be used to transmit terminal messages between users and machines. xtell is available for Linux, BSD and most other Unix based operating systems. An information disclosure vulnerability has been...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 -...

[SECURITY] [DSA 110-1] New CUPS packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 110-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : cupsys...

ICQ remote buffer overflow vulnerability

This is very similar to the AIM overflow recently discovered. ICQ protocol uses the same TLV 2711 packet and there is a similar weakness in the parsing of the packet. The details of this vulnerability will not be released until a further time when a patch has been implemented, probably. ICQ2000...

rsync 2.5.1 - Remote (2)

rsync 2.5.1 - Remote 2 / 7350rsync - rsync include include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777 defi...

rsync 2.5.1 - Remote (1)

/ 7350fuqnut - rsync include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777 define INCREMENT 512 define ALLIGN...

Alchemy Eye/Network Monitor Traversal Arbitrary Command Execution

Alchemy Eye and Alchemy Network Monitor are network management tools for Microsoft Windows. The product contains a built-in HTTP server for remote monitoring and control. This HTTP server allows arbitrary commands to be run on the server by a remote attacker. %NASLMINLEVEL 70300 This script was...

GNOME libgtop Daemon Remote Format String

It seems that libgtop is/was running on this port and is vulnerable to a format string attack which may allow an attacker to gain a shell on this host with the privileges of 'nobody'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10812; scriptversion"1.20";...

CVE-2001-0687

The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...