986 matches found
BolinTech DreamFTP Server 1.2 (1.02/TryFTP 1.0.0.1) - Remote User Name Format String
include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation: OS/SP-independent // string-save: 00, 0a and 0d free. // portbinding: port 28876 // looping: reconnect after disconnect char shellcode =...
Vpop3d - Remote Denial of Service
Vpop3d - Remote Denial of Service source: https://www.securityfocus.com/bid/8473/info A vulnerability has been reported for Vpop3d that may make it prone to denial of service attacks. The problem is said to occur due to the affected daemon failing to sufficiently handle USER name values of...
Vpop3d - Remote Denial of Service
source: https://www.securityfocus.com/bid/8473/info A vulnerability has been reported for Vpop3d that may make it prone to denial of service attacks. The problem is said to occur due to the affected daemon failing to sufficiently handle USER name values of excessive length. As a result, if a...
CVE-2002-0891: Undefined Security Weakness
The web interface WebUI of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service crash via a long user name...
Microsoft Windows SMB Registry : Last Logged User Name Disclosure
The registry key HKLM\Software\Microsoft\Windows NT\WinLogon\DontDisplayLastUserName is not set to 1. It means that users who attempt to log in locally will see the name of the last user who logged in successfully in this computer on the screen. C Tenable Network Security, Inc. include"compat.inc...
CVE-2002-1325
Microsoft Virtual Machine VM build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."...
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1)
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does n...
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1)
// source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user names. When excessive data is...
CVE-2002-1047
The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...
CVE-2002-0398
Red-M 1050 Bluetooth Access Point PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name...
PT-2002-1753 · Myguestbook · Myguestbook
Name of the Vulnerable Software and Affected Versions: MyGuestbook version 1.0 Description: A cross-site scripting issue allows remote attackers to execute arbitrary script or inject HTML via fields such as user name or comments. Recommendations: For MyGuestbook version 1.0, consider validating a...
CVE-2000-0060: Undefined Security Weakness
Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name...
Ultimate Bulletin Board
Here is a message I just popped off to infopop about their Ultimate Bulletin Board v5 product. It's not really meant for someone not used to their product. -------------------------------------------------------------------------------- If a user has info stored in a cookie, replies to a message...
CVE-2000-0960
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse...
DoS in Sonicwall SOHO firewall
Hi, i was just playing a bit with a Sonicwall SOHO firewall, to verify performances and security of the product. I've noticed that using a very long string some hundreds of chars as the User Name in the auth page of the Sonicwall web server, the firewall reacts strangely: it begins to refuse...
Дырка в Intel InBusiness eMail Station
Классическое переполнение буфера при длинном имени пользователя в протоколе POP3...
CVE-2000-0584
Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SRINIT command with a long user name or group name...
CVE-2000-0399
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name...