54 matches found
CVE-2006-2276
bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...
[Full-Disclosure] XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow Vendor: - ------- http://www.evolutionx.info Vulnerable version: - ------------------- Test on EvolutionX 3921 3935, maybe all version of EvolutionX Vunlnerablity: - --------------...
CVE-2003-0795
The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service crash via a malformed telnet command to the telnet CLI port, which may trigger a null...
zebra/quagga denial of service vulnerability
A remote attacker could cause zebra/quagga to crash by sending a malformed telnet command to their management port...
CVE-2003-0795
The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service crash via a malformed telnet command to the telnet CLI port, which may trigger a null...
CVE-2003-0795
Removed by vendor...
Quagga / Zebra Malformed Telnet Command Denial of Service
A remote denial of service vulnerability exists in Zebra and Quagga that can be triggered by sending a telnet option delimiter with no actual option data, which causes the daemon to attempt to dereference a typically NULL pointer and crash. This affects all versions from 0.90a to 0.93b. MA...
Buffer overflow in ArgoSoft FTP Server
Product: ArGoSOft FTP Server Version: 1.22 other ? OffSite: http://www.argosoft.com/ Problem: Remote buffer overflow -------------------------------------------------------------- ArGoSOft FTP Server - FTP server for Windows. He is exposed to attack. The server does not process the input data...
Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow
Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual...
CVE-2001-0444
Cisco CBOS 2.3.0.053 sends output of the "sh nat" aka "show nat" command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information...
Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing
source: https://www.securityfocus.com/bid/481/info Netscape's Fasttrack server is supposed to display a directory listing if the follwing three conditions are met: 1: Directory listing is enabled 2: No filename is specified in the requested URL 3: There is no index file in that directory defaults...
Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)
source: https://www.securityfocus.com/bid/502/info The imapd login process is susceptible to a buffer overflow attack which will crash the service. Telnet to target machine, port 143 OK IMAP4 Server IMail 4.06 X LOGIN glob1 glob2 Where glob1 is 1200 characters and glob2 is 1300 characters...
Verity Search97 2.1 - Security
Verity Search97 2.1 - Security source: https://www.securityfocus.com/bid/162/info A pair of vulnerabilities exist in Verity's Search97 web interface to the Verity search engine. The first vulnerability is due to cgi-bin scripts, s97cgi and s97rcgi failing to check for the existence of certain she...
Verity Search97 2.1 - Security
source: https://www.securityfocus.com/bid/162/info A pair of vulnerabilities exist in Verity's Search97 web interface to the Verity search engine. The first vulnerability is due to cgi-bin scripts, s97cgi and s97rcgi failing to check for the existence of certain shell meta characters. This allows...