2252 matches found
CVE-2009-3094
The approxyftphandler function in modules/proxy/proxyftp.c in the modproxyftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service NULL pointer dereference and child process crash via a malformed reply to an EPSV command...
Microsoft RDP client multiple security vulnerabilities
Memory corruption in ActiveX control, memory corruption on server reply processing...
IBM Lotus Sametime Instant Messaging and Web Conferencing
Different reply timeings in case for invalid username and password...
Stack overflow
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...
CVE-2009-1675: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command...
ntp client buffer overflow
Buffer overflow on NTP server reply parsing...
IncrediMail 5.86 Cross Site Scripting
!/usr/bin/perl -w IncrediMail Xe latest version XSS Vulnerability Discovered by : Bui Quang Minh Description : The most of popular Mail Client now exclude Script Code for mail content. It aims to avoid the type of XSS exploitation For e.g: stolen cookie. IncrediMail also remove Script Code when t...
IncrediMail 5.86 - Cross-Site Scripting Script Execution
IncrediMail 5.86 - Cross-Site Scripting Script Execution !/usr/bin/perl -w IncrediMail Xe latest version XSS Vulnerability Discovered by : Bui Quang Minh Description : The most of popular Mail Client now exclude Script Code for mail content. It aims to avoid the type of XSS exploitation For e.g:...
IncrediMail 5.86 - Cross-Site Scripting Script Execution
!/usr/bin/perl -w IncrediMail Xe latest version XSS Vulnerability Discovered by : Bui Quang Minh Description : The most of popular Mail Client now exclude Script Code for mail content. It aims to avoid the type of XSS exploitation For e.g: stolen cookie. IncrediMail also remove Script Code when t...
POP Peeper mail notifier buffer overflow
Buffer overflow UIDL server reply parsing...
Shoutcast server buffer overflow
Buffer overflow in DNAS Relay service on master server reply parsing...
CVE-2009-0363
Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...
CVE-2008-4194
The pexecquery function in src/dnsquery.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service daemon crash via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."...
Design/Logic Flaw
The pexecquery function in src/dnsquery.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service daemon crash via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."...
CVE-2008-4194
The pexecquery function in src/dnsquery.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service daemon crash via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."...
CVE-2008-4194: Undefined Security Weakness
The pexecquery function in src/dnsquery.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service daemon crash via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."...
Code injection
Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets...
CVE-2008-3208
CVE-2008-3208 affects Simple DNS Plus 4.1 and 5.0, and potentially other versions before 5.1.101. It allows remote attackers to cause a denial of service via multiple DNS reply packets. The sources describe a DoS impact with partial availability, but do not provide detailed root-cause analysis be...
CVE-2008-3208: Improper Input Validation
Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets...