MailMax < 5.0.10.8 Multiple Remote Overflows

The remote host is running a version of the MailMax mail server that is vulnerable to various overflows. These issues may allow an unauthenticated, remote attacker to disable the affected service and possibly to execute arbitrary commands on the affected host. C Tenable Network Security, Inc...

FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow

FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow source: https://www.securityfocus.com/bid/7508/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Rcpt To'...

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

source: https://www.securityfocus.com/bid/7506/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From' arguments. Due to the nature of this vulnerability it may be...

Opera < 7.11 Filename Extension Handling Overflow

The version of Opera installed on the remote host has a buffer overflow condition in the code which handles the file extensions of the remote web pages. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host visit it using Opera. He would then be able to...

FTGatePro Mail Server Multiple Command Remote Overflow

The remote SMTP server is running FT Gate Pro. There is a remote stack-based buffer overflow vulnerability in this version. This issue can be exploited by supplying a very long argument to the 'MAIL FROM' and 'RCPT TO' SMTP commands. A remote attacker could use this to crash the SMTP server, or...

StockMan Shopping Cart shop.plx page Parameter Arbitrary Command Execution

The remote host is running the StockMan shopping cart. According to the version number of the CGI shop.plx, there is a flaw in this installation that could allow an attacker to execute arbitrary commands on this host, and which could also allow him to obtain your list of customers or their credit...

Coppermine Photo Gallery displayimage.php SQL Injection

The remote host is running Coppermine Gallery - a set of PHP scripts designed to handle galleries of pictures. This product has a vulnerability which allows a remote attacker to execute arbitrary SQL queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Coppermine Photo Gallery Multiple Extension File Upload Arbitrary PHP Code Execution

The remote host is running Coppermine Gallery - a set of PHP scripts designed to handle galleries of pictures. This product has a vulnerability which allows an attacker to upload a rogue jpeg file which may contain PHP commands. A remote attacker could use this to execute arbitrary commands in th...

Abyss Web Server Malformed GET Request Remote DoS

It was possible to kill the remote web server by sending empty HTTP request headers namely Connection: or Range:. An attacker may use this flaw to crash the affected application, thereby denying service to legitimate users. C Tenable Network Security, Inc. References: Date: Sat, 5 Apr 2003 12:21:...

Apache Tomcat mod_jk Invalid Transfer-Encoding Chunked Field DoS

According to the banner, the remote host is using a vulnerable version of the Apache modjk module. Such versions have a bug that could allow a remote attacker to use chunked encoding requests to desynchronize Apache and Tomcat, and therefore prevent the remote web server from working properly. C...

Ecartis HTML Field Manipulation Arbitrary User Password Reset

The remote host is running the Ecartis Mailing List Manager web interface lsg2.cgi. According to its version number, there is a vulnerability that allows an authenticated user to change anyone's password, including the list administrators. An authenticated attacker could exploit this to take...

Tanne netzio.c logger Function Remote Format String

The remote tanned server contains a format string vulnerability. An attacker may use this flaw to gain a shell on this host. C Tenable Network Security, Inc. Ref: From: "dong-h0un yoU" To: [email protected] Date: Tue, 07 Jan 2003 16:59:11 +0800 Subject: VulnWatch INetCop Security Advisory...

osCommerce 2.2ms1 Multiple Script XSS

osCommerce is a widely installed open source shopping e-commerce solution. An attacker may use it to perform a cross-site scripting attack on this host. %NASLMINLEVEL 70300 written by K-Otik.com osCommerce Cross Site Scripting Bugs Ref added by rd : Message-ID: From: Daniel Alcantara de la Hoz To...

l2tpd < 0.68 Multiple Vulnerabilities

The remote host is running a version of l2tpd prior to 0.67. This version is vulnerable to a buffer overflow that could allow an attacker to gain a root shell on this host. In addition, this program does not initialize its random number generator. Therefore, an attacker may predict some key value...

FreeBSD 2.x lpd Long DNS Hostname Overflow

The remote lpd daemon seems to be vulnerable to a buffer overflow when a host with a too long DNS host name connects to it. Nessus solely relied on the version of the remote operating system to issue an alert, so this might be a false positive. C Tenable Network Security, Inc. This is a check for...

Mambo Site Server MD5 Hash Session ID Privilege Escalation

The remote installation of Mambo Site Server improperly validates the cookies that are sent back by the user. As a result, a user may impersonate the administrator by using the MD5 value of a received cookie and thereby gain administrative control of the affected application. %NASLMINLEVEL 70300 ...

Simple File Manager Directory / Filename XSS

The remote Simple File Manager CGI fm.php improperly validates the names of the directories entered and created by the user. As a result, a user could generate a cross-site scripting attack on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

[NEWS] DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

Buffer overflow in Snort RPC preprocessor

Overview There is a buffer overflow vulnerability in the RPC preprocessing feature of Snort versions 1.8 through 1.9.0 and 2.0 beta. Description Martin Roesch, the primary Snort developer, described the vulnerability by saying:When the RPC decoder normalizes fragmented RPC records, it incorrectly...

Sendmail headers.c crackaddr Function Address Field Handling Remote Overflow

The remote Sendmail server, according to its version number, may be affected by a remote buffer overflow allowing remote users to gain root privileges. Sendmail versions from 5.79 to 8.12.7 are affected. Nessus reports this vulnerability using only the banner of the remote SMTP server. Therefore,...