CesarFTP 0.99 g - Remote 'Username' Buffer Overrun

source: https://www.securityfocus.com/bid/7946/info A buffer overrun vulnerability has been reported for CesarFTP. The problem is said to occur when multiple 'USER' commands are processed within a single session. When the issue is triggered, it may be possible to overwrite sensitive locations in...

MailEnable buffer overflow

Buffer overflow on oversized USER command...

CVE-2002-1057

Buffer overflow in SmartMax MailMax POP3 daemon popmax 4.8 allows remote attackers to execute arbitrary code via a long USER command...

CVE-2002-0930: Undefined Security Weakness

Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 NWFTPD allows remote attackers to cause a denial of service ABEND via format strings in the USER command...

Buffer overflow in Mailmax

Buffer overflow in USER command...

Buffer overflow in YoungZSoft CMailServer

Buffer overflow on long USER command...

CVE-2001-0794

Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command...

CVE-2001-0794

CVE-2001-0794 : The connected sources indicate a buffer overflow in the A-FTP Anonymous FTP Server triggered by a long USER command, causing a denial of service. The impact is described as partial availability. No versions, vendor, or detailed root-cause fixes are provided in the documents, and t...

CVE-2001-0794: Undefined Security Weakness

Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command...

CVE-2001-0136

ProFTPD 1.2.0rc2 is affected by a memory leak that can be exploited to cause DoS via a sequence of USER commands and, if the server is installed with a writable scoreboard, possibly SIZE commands. Mandrake advisory notes the USER and SIZE leaks (SIZE only when scoreboard is writable) and mentions...

CVE-2001-0136: Missing Release of Memory after Effective Lifetime

Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed...

CVE-1999-1202

CVE-1999-1202 affects StarTech products: (1) POP3 proxy server and (2) a telnet server. The vulnerability allows remote attackers to cause a denial of service by sending an excessively long USER command. The connected documents confirm the affected components and the root cause (long USER command...

CVE-1999-1113

Affected software: Eudora Internet Mail Server (EIMS) for Mac OS, 2.01 and earlier (pop3/poppassd service). Vuln: buffer overflow in the poppassd USER handling (long USER after USER command on port 106) allows remote disruption of service; OpenVAS notes potential remote code execution, Nessus con...

CVE-1999-1113: Undefined Security Weakness

Buffer overflow in Eudora Internet Mail Server EIMS 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106...

CVE-2000-1194: Undefined Security Weakness

Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the 1 USER or 2 CWD commands...

CVE-1999-1514: Undefined Security Weakness

Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command...

CVE-1999-1202: Undefined Security Weakness

StarTech 1 POP3 proxy server and 2 telnet server allows remote attackers to cause a denial of service via a long USER command...

SpeechD 0.1/0.2 - Privileged Command Execution

source: https://www.securityfocus.com/bid/3326/info SpeechD is a device-independent layer for speech synthesis under Linux, providing an interface for speech-based applications or device drivers. SpeechD has been found to contain a flaw under certain implementations which can permit a local user ...

Shopping Cart Version 1.23

User can execute command, but can't use "../" www.server.com/cgi- local/shop.pl/SID=947626980.19094/page=;ls| XP-TEAM DonHuan [email protected]...

CVE-2000-1163

CVE-2000-1163 affects Ghostscript prior to 5.10-16, which uses an insecure LD_RUN_PATH value to locate libraries in the current directory. This enables a local attacker to place a Trojan horse library in a directory from which another user runs Ghostscript, potentially executing code with the use...