000102advisory.txt

Hat-Squad Advisory: Remote buffer overflow in MailEnable IMAP service Product: MailEnable Mail Server Vendor Url: http://www.mailenable.com Version: MailEnable Professional Edition v1.52, MailEnable Enterprise Edition v1.01 Vulnerability: Remote buffer overflow in IMAP service Release Date: 26...

MS04-006: WINS Server Remote Overflow (830352) (uncredentialed check)

The remote Windows Internet Naming Service WINS is affected by a vulnerability that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet with improperly advertised lengths. C Tenable Network Security, Inc...

PAFileDB Multiple Script Error Message Path Disclosure

There is a flaw in the remote version of paFileDB that may let an attacker obtain the physical path of the remote installation by sending a malformed request to one of the scripts 'admins.php', 'category.php', or 'team.php'. This information may help an attacker make more focused attacks against...

CUPS Internet Printing Protocol (IPP) Implementation Empty UDP Datagram Remote DoS

The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. %NASLMINLEVEL 70300 This script was written ...

up-imapproxy IMAP Proxy IMAP_Line_Read() Function Literal Size DoS

The remote host is running at least one instance of up-imapproxy that does not properly handle IMAP literals. This flaw allows a remote attacker to crash the proxy, killing existing connections as well as preventing new ones, by using literals at unexpected times. This script was written by Georg...

Multiple Vendor DNS Response Flooding Denial Of Service

The remote DNS server is vulnerable to a denial of service attack because it replies to DNS responses. An attacker could exploit this vulnerability by spoofing a DNS packet so that it appears to come from 127.0.0.1 and make the remote DNS server enter into an infinite loop, therefore denying...

NetNote Server (<= 2.2 build 230) Crafted String DoS Exploit

No description provided by source. / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage -...

MS04-039: ISA Server 2000 and Proxy Server 2.0 Internet Content Spoofing (888258)

The remote host is running ISA Server 2000, an HTTP proxy. The remote version of this software is vulnerable to content spoofing attacks. An attacker could lure a victim to visit a malicious website and the user could believe is visiting a trusted web site. C Tenable Network Security, Inc...

technote.pl

Technote Inc. from Korea Command Excution Spawn bash style Shell with webserver uid This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $pdf; my $url1; my $number; my $url2; my $shiz; my @results; my $probe; my @U; $U1 =...

HTTP Header Name Remote Format String

The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose name includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code ...

Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability

Description Microsoft ISA and Proxy Server are reportedly prone to a Web site spoofing vulnerability. Successful exploitation of this issue could allow a remote attacker to spoof a trusted Web site. If a connection were made to the spoofed Web site using SSL, the malicious site would not be able ...

ACROS Security: Unsanitized Session ID Cookie Allows Modifying Server Response

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2004-10-14-3 ------------------------------------------------------------------------- ASPR 2004-10-14-3: Unsanitized Session ID Cookie Allows Modifying Serv...

CVE-2004-1673

accountsettingsadd.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions...

CFMX vulnerability

Software: Macromedia ColdFusion MX 6.1 Description: There is a vulnerability in the ColdFusion MX 6.1 product. To exploit this, a user needs access to create a cold fusion template on a ColdFusion server with CreateObject or cfobject tags enabled. The code given below writes a java class to the...

Icecast Encoded Traversal Arbitrary File Access

The remote server runs a version of Icecast, an open source streaming audio server, which is version 1.3.10 or older. These versions are affected by a directory traversal flaw because the application fails to properly sanitize user-supplied input. An attacker could send a specially crafted URL to...

Samba MS-DOS Path Request Arbitrary File Retrieval

According to its version number, the remote Samba server is affected by a flaw that allows an attacker to access arbitrary files which exist outside of the shares's defined path. An attacker needs a valid account to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

MyServer HTTP POST Request Remote Overflow DoS

The remote host is running MyServer, an open source web server. The installed version is vulnerable to remote denial of service attack. Using a specially crafted HTTP POST request to 'index.html' when 'View' is set to 'Logon', an unauthenticated, remote attacker can cause the server to stop...

MDaemon POP Server User Name Overflow DoS

The remote host is running the MDaemon POP server. It is possible to crash the remote service by sending a too long 'user' command. This problem allows an attacker to make the remote MDaemon service crash, thus preventing legitimate users from receiving emails. C Tenable Network Security, Inc...

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service // source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the ga...