Buffer overflow in webalizer

Buffer overflow in host name resolution during log analizing...

CVE-1999-1233

Product/affected component: IIS 4.0. Vulnerability description: The “Domain Resolution” issue occurs because access is not properly restricted for the initial session request from an IP address that does not resolve to a DNS domain. Root cause (as stated): Improper restriction of initial session ...

CVE-1999-1233

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

CVE-1999-1233: Undefined Security Weakness

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

[SA-2002:01] Slashcode login vulnerability

SA-2002:01 Slashcode login vulnerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a cross-site scripting vulnerability in all versions prior to 2.2.5, released February 7, 2002. Users who have Javascript enabled, and who can be persuaded to click...

Vulnerabilities in squirrelmail

Multiple security vulnerabilties exist in SquirrelMail v 1.2.3 that allow malicious HTML messages to: send messages appearing to come from the user run arbitrary javascript Description ----------- The compose.php script allows parameters to be passed as GETs. Therefore including the following in ...

Authentication By-Pass Vulnerability in OpenSSH-2.3.1 (devel snapshot)

Please, check http://www.openssh.com/security.html for a full summary of security related issues in OpenSSH. ---------------------------------------------------------------------------- OpenBSD Security Advisory February 8, 2001 Authentication By-Pass Vulnerability in OpenSSH-2.3.1...

Локальный DoS против Windows

Открытие большого числа datagram-сокетов в клиентском приложении приводит к невозможности работать с UDP Включая разрешение имен...

Microsoft Windows 982000 - UDP Socket Denial of Service

Microsoft Windows 982000 - UDP Socket Denial of Service source: https://www.securityfocus.com/bid/2340/info Microsoft Windows 2000 and 98 are subject to a denial of service condition. Receiving a maliciously crafted email or visiting a malicious web site could prevent Windows 2000 from DNS...

CVE-2000-1178: Improper Link Resolution Before File Access

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

Oops Proxy Server 1.4.22 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)

Oops Proxy Server 1.4.22 - Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows exist in this product. In one instance, it is possible...

ISC BIND 8.2.2-P5 - Denial of Service

source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in the Compressed Zone Transfer ZXFR...

SSH host key authentication can be bypassed when DNS is used to resolve localhost

Overview This vulnerability allows an attacker to redirect an SSH connection to an arbitary host. Description When making connections to localhost, SSH disables host key checking to provide compatibility with NFS filesystems. As a result, if the victim's machine uses a poisoned DNS server to...

[COVERT-2000-08] O'Reilly WebSite Professional Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 19, 2000 O'Reilly WebSite Professional Overflow COVERT-2000-08 o Synopsis The indexing utility webfind.exe distributed with O'Reilly WebSite Professional contains an unchecked buffer allowing...

CVE-2000-0342: Improper Link Resolution Before File Access

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

DoS против PGP Certificate Server

При подключении на порт 4000 хоста у которого не разрешается имя DNS сервер произхводит обращение по нулевому указателю...

PT-2000-1997 · Microsoft · Windows 98 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 98, NT 4.0, 2000, and XP Description: The default configuration for the domain name resolver sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query,...