7119 matches found
CVE-2001-0676
CVE-2001-0676 affects Rit Research Labs The Bat!
CVE-2001-0675
The Bat! (RIT Research Labs) for Windows (The Bat! v1.51) is affected by a vulnerability where a remote attacker can trigger a denial of service by delivering an email containing a carriage return CR not followed by a LF. This incorrect RFC822 parsing can cause premature end-of-message handling, ...
Menasoft SPHEREserver 0.99 - Denial of Service
// source: https://www.securityfocus.com/bid/4258/info Menasoft SPHEREserver .99 is an online role playing game server. It is vulnerable to a denial of service; multiple connections to the server can be made from a single machine, exhausting available connections and denying connections to...
BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY
Hi bugtraq again... Now i' ve found another vulnerability in BPM STUDIO PRO 4.2 http server implementation. Anyone can download any file in some host running this software simply like performing this http request : http://BPM-HOST/../../../../autoexec.bat http server is not activated by default...
slocate bug.
Hey, Its a good time to announce that 2xs security LTD. decided to create a research team in order to focus on finding new bugs, further more we managed to develop a security tool to discover bugs/security flaws. In the near future, the tool itself will became an open source project. slocate Secu...
Heap overflow in snmpnetstat
---------------------------- Axioma Security Research January 3, 2002 A D V I S O R Y www.axiomasistemas.com ---------------------------- Platforms : All : Tested on Red Hat Linux 7.1 Application : snmpnetstat from ucd-SNMP-4.2.3 www.net-snmp.org Impact : Remote access to the snmpnetstat client...
w00w00 on AOL Instant Messenger (serious vulnerability)
================================= AOL Instant Messenger advisory w00w00! http://www.w00w00.org ================================= Author: Matt Conover [email protected] Contributors: nocarrier, napster, and w00w00 collectively PRELUDE Happy w00year! It has been a while, friends, but w00w00 is sti...
CVE-2001-0676
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment...
[synnergy] - Sudo Vudo
Vudo - An object superstitiously believed to embody magical powers - -------------- Michel "MaXX" Kaempf [email protected] -------------- ---------------- Copyright C 2001 Synnergy Networks ---------------- -- 0x00 - Introduction ----------------------------------------------- Sudo superuser do...
ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (1)
/ tsig0wn.c Copyright Field Marshal August Wilhelm Anton Count Neithardt von Gneisenau [email protected] The author is not and will not be held responsible for the action of other people using this code. provided for informational purposes only since a greetz section is de rigeur greets to my...
BFTPd - 'vsprintf()' Format Strings
/ Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt the represented code in your programs,...
Linux news 15.11.00
Linux Kernel pre-patch 2.4.0 test11-pre5 Пятый пререлиз одинадцатого тестового ядра Linux за номером 2.4. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Вышел Kernel Traffic 93 Вышел 93 номер Kernel Traffic. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-13-003-06-OS-KN Опро...
TransSoft's Broker FTP Server 3.x & 4.x Remote DoS attack Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TransSoft's Broker FTP Server 3.x & 4.x Remote DoS attack Vulnerability USSR Advisory Code: USSR-2000054 Public Disclosure Date: October 18, 2000 Vendors Affected: TransSoft's: http://www.transsoft.com/ Systems Affected: Broker FTP Server, all release...
Web Application Security Survey
-Web Application Security Survey- Results show that Microsoft Hotmail, Excite, Altavista, E-Bay, Lycos Netscape WebMail, E-Trade, Infoseek/Go.com and their users are all currently vulnerable to web based attack. disclaimer The opinions, ideas and information expressed in the following text are my...
Accounts easily compromised on Critical Path web mail service, CP does not respond after 30 days.
Security Advisory: Cross-site scripting vulnerability compromises accounts on Altavista, ICQ, US West/Qwest, others Date 21 August 2000 Author Jeffrey W. Baker, email [email protected] Copyright statement This security advisory is Copyright 2000 by Jeffrey William Baker [email protected]. The advisor...
PT-1999-1062 · Nfr · Network Flight Recorder
Name of the Vulnerable Software and Affected Versions: Network Flight Recorder NFR version 2.0.2-Research Description: A buffer overflow issue in the webd component of Network Flight Recorder NFR allows remote attackers to execute commands. Recommendations: For Network Flight Recorder NFR version...
Microsoft Research AutoCollage
Microsoft Research AutoCollage Product Family Category...