40 matches found
CVE-2019-11080
Sitecore Experience Platform XP prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS 293863. An authenticated user with necessary permissions is able to remotely execute OS commands by sending a crafted serialized object...
Developers Versus Automation Engineers: How We Ended the Fighting with the Right CI Process
Hey developers and DevOps professionals: what if I told you that how you wrap and execute your automation tests could be the key to making your development process faster, more professional and stable, and stop the bickering between your developers and automation teams? This post will describe ho...
Remote code execution
A remote code execution vulnerability exists when Team Foundation Server TFS does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team...
CVE-2018-8529
CVE-2018-8529 : A remote code execution vulnerability exists in Team Foundation Server (TFS) where basic authorization is not enabled on the communication between TFS and the Search services. The underlying issue allows an attacker to execute commands on the Search service. Microsoft’s security u...
KLA11358 Multiple vulnerabilities in Microsoft Development Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft PowerShell can be exploited...
A cumulative update is available for Team Foundation Server 2010 Service Pack 1
A cumulative update is available for Team Foundation Server 2010 Service Pack 1 Introduction A cumulative update CU is available for Microsoft Team Foundation Server TFS 2010 Service Pack 1 SP1. This CU resolves the issues that are described in the following Microsoft Knowledge Base KB article:...
TFS Gateway 4.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/613/info TFS Gateway 4.0, when configured in a specific non-default manner, is vulnerable to a remotely exploitable denial of service attack. If 'return entire message to sender' is enabled for failed send attempts, and a...
TFS SMTP < 4.0 Build 210 MAIL FROM Remote Overflow
Binary data 2034.prm...
CVE-1999-1515
The CVE-1999-1515 entry describes a vulnerability in the TenFour TFS Gateway 4.0 where a non-default configuration enables a denial-of-service. The issue arises from messages with incorrect sender and recipient addresses, causing the gateway to repeatedly attempt to return the message every 10 se...
CVE-1999-1516
CVE-1999-1516 affects TenFour TFS Gateway SMTP mail server 3.2. A buffer overflow occurs when the MAIL FROM argument exceeds 128 bytes, potentially crashing the server and possibly allowing arbitrary code execution. Documented details specify the vulnerability and impact (crash and possible code ...
CVE-1999-1515
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds...
CVE-1999-1516
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string...
smtp_bof.txt
Subject: SECURITY TenFour TFS SMTP 3.2 Buffer Overflow To: [email protected] INTRINsec Security Advisory Release Date : August 30, 1999 Software : TenFour TFS SMTP 3.2 Operating System: Windows NT 3.x / 4.x Impact : The attackers can use a misconfigured TFS SMTP for spamming and can...
TFS SMTP 3.2 MAIL FROM overflow
The remote SMTP server may be affected by a buffer overflow triggered when it receives an overly long argument to the 'MAIL FROM' command. This vulnerability is reported to affect TenFour TFS SMTP and may allow an unauthenticated remote attacker to crash the service or even execute arbitrary code...
CVE-1999-1516
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string...
CVE-1999-1515
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds...
TFS Gateway 4.0 - Denial of Service
source: https://www.securityfocus.com/bid/613/info TFS Gateway 4.0, when configured in a specific non-default manner, is vulnerable to a remotely exploitable denial of service attack. If 'return entire message to sender' is enabled for failed send attempts, and an email is sent to the TFS Gateway...
TFS Gateway 4.0 - Denial of Service
TFS Gateway 4.0 - Denial of Service source: https://www.securityfocus.com/bid/613/info TFS Gateway 4.0, when configured in a specific non-default manner, is vulnerable to a remotely exploitable denial of service attack. If 'return entire message to sender' is enabled for failed send attempts, and...
