phpBB Advanced Quick Reply Hack 1.01.1 - Remote File Inclusion

phpBB Advanced Quick Reply Hack 1.01.1 - Remote File Inclusion source: https://www.securityfocus.com/bid/6173/info The phpBB Advanced Quick Reply Hack is prone to an issue which may allow attackers to include arbitrary files from a remote server. It is possible for remote attackers to influence t...

Buffer overflow in Microsoft Exchange

Buffer overflow on EHELO reply parsing...

CVE-2001-1088: Undefined Security Weakness

Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof...

CVE-2002-0280

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

CVE-2002-0280

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

EUVD-2002-0277

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

CVE-2002-0280: Undefined Security Weakness

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply...

Buffer overflow in Kerberos 4 ftp client

Heap overflow on long server reply...

CVE-2002-0140: Undefined Security Weakness

Domain Name Relay Daemon dnrd 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parsequery, getobjectname, and possibly other functions...

CVE-2001-0754

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY ping packets, which cause it to enter ROMMON mode and stop forwarding packets...

CVE-2001-0754

Cisco CBOS 2.3.8 and earlier is affected. A remote attacker can trigger a denial of service by sending a sequence of large ICMP ECHO REPLY (ping) packets that causes the device to enter ROMMON mode and stop forwarding packets. Affected component is the CBOS software on Cisco devices; the root cau...

CVE-2001-0754: Undefined Security Weakness

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY ping packets, which cause it to enter ROMMON mode and stop forwarding packets...

CVE-2001-0754

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY ping packets, which cause it to enter ROMMON mode and stop forwarding packets...

CVE-1999-1220: Undefined Security Weakness

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header...

lil' exim format bug

Hi BugTrackers Just a little bug to tell: THE BUG ------- accept.c, line 2506: else if smtpreply != NULL moansmtpbatchNULL, smtpreply; while moansmtpbatch is like this: moansmtpbatchchar cmdbuffer, char format, ... So when smtpreply contains format strings, it get transformed by moansmtpbatch. Wh...

Debian 2.x / RedHat 6.2 / IRIX 5/6 / Solaris 2.x - Mail Reply-To Field

source: https://www.securityfocus.com/bid/1910/info mail is a simple console e-mail client. A vulnerability exists in several vendors' distributions of this program. An attacker can compose an email message with a carefully-formed string in the Reply-To: field which includes shell meta-characters...

Debian 2.x RedHat 6.2 IRIX 56 Solaris 2.x - Mail Reply-To Field

Debian 2.x RedHat 6.2 IRIX 56 Solaris 2.x - Mail Reply-To Field source: https://www.securityfocus.com/bid/1910/info mail is a simple console e-mail client. A vulnerability exists in several vendors' distributions of this program. An attacker can compose an email message with a carefully-formed...

CVE-1999-1512

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...

CVE-1999-0207: Undefined Security Weakness

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command...

ms.outlook.spoof.txt

Date: Tue, 20 Apr 1999 15:10:05 -0700 From: Nate Lawson To: [email protected] Subject: Outlook 98 allows spoofing internal users Problem: Outlook uses a sender's Reply-To address silently, allowing a user to inadvertently send data to an Internet mail account when intending to reply to an...