Vpop3d - Remote Denial of Service

Vpop3d - Remote Denial of Service source: https://www.securityfocus.com/bid/8473/info A vulnerability has been reported for Vpop3d that may make it prone to denial of service attacks. The problem is said to occur due to the affected daemon failing to sufficiently handle USER name values of...

Vpop3d - Remote Denial of Service

source: https://www.securityfocus.com/bid/8473/info A vulnerability has been reported for Vpop3d that may make it prone to denial of service attacks. The problem is said to occur due to the affected daemon failing to sufficiently handle USER name values of excessive length. As a result, if a...

Microsoft Windows SMB Registry : Last Logged User Name Disclosure

The registry key HKLM\Software\Microsoft\Windows NT\WinLogon\DontDisplayLastUserName is not set to 1. It means that users who attempt to log in locally will see the name of the last user who logged in successfully in this computer on the screen. C Tenable Network Security, Inc. include"compat.inc...

CVE-2002-1325

Microsoft Virtual Machine VM build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."...

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1)

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does n...

Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1)

// source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user names. When excessive data is...

CVE-2002-1047

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-0398

Red-M 1050 Bluetooth Access Point PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name...

PT-2002-1753 · Myguestbook · Myguestbook

Name of the Vulnerable Software and Affected Versions: MyGuestbook version 1.0 Description: A cross-site scripting issue allows remote attackers to execute arbitrary script or inject HTML via fields such as user name or comments. Recommendations: For MyGuestbook version 1.0, consider validating a...

Ultimate Bulletin Board

Here is a message I just popped off to infopop about their Ultimate Bulletin Board v5 product. It's not really meant for someone not used to their product. -------------------------------------------------------------------------------- If a user has info stored in a cookie, replies to a message...

CVE-2000-0960

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse...

DoS in Sonicwall SOHO firewall

Hi, i was just playing a bit with a Sonicwall SOHO firewall, to verify performances and security of the product. I've noticed that using a very long string some hundreds of chars as the User Name in the auth page of the Sonicwall web server, the firewall reacts strangely: it begins to refuse...

Дырка в Intel InBusiness eMail Station

Классическое переполнение буфера при длинном имени пользователя в протоколе POP3...

CVE-2000-0584

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SRINIT command with a long user name or group name...

CVE-2000-0399

Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name...

CVE-2000-0321

Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name...

CVE-2000-0321

Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name...

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...

CVE-1999-1316

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...

TransSoft Broker FTP Server 3.0 x4.0 - User Name Buffer Overflow

TransSoft Broker FTP Server 3.0 x4.0 - User Name Buffer Overflow source: https://www.securityfocus.com/bid/783/info If an unusually long user name is passed to the Broker FTP server software, the program will crash. If the program is running as a service, the service will consume all available...