IISPop remote DOS

hi The IISPop EMail Server http://www.curtiscomp.com/was designed for small networks,This is a POP3 only server, designed to be paired with the SMTP server bundled in Windows 2000/IIS 5. I have found that IISpop is vulnerable has a attack DOS caused by sends of a broad buffer 289999 byte this...

[SECURITY] [DSA 177-1] New PAM packages fix serious security violation in Debian/unstable

-------------------------------------------------------------------------- Debian Security Advisory DSA 177-1 [email protected] http://www.debian.org/security/ Martin Schulze October 17th, 2002 http://www.debian.org/security/faq -...

New buffer overflow in plaetDNS

hi planetdns http://www.planetdns.netis commercial software package that allows you to turn computer into an Internet server. and be able to create an Internet Name, connect to a web server, FTP, mail server, etc. running on your computer. planetdns is vulnerable has a buffer overflow with a...

pam - serious security violation

A serious security violation in PAM was discovered. Disabled passwords i.e. those with '' in the password file were classified as empty password and access to such accounts is granted through the regular login procedure getty, telnet, ssh. This works for all such accounts whose shell field in the...

Re: MFC ISAPI Framework Buffer Overflow

In-Reply-To: [email protected] BadBlue and all vendors who wrote ISAPI extensions with MFC should recompile with Visual Studio 6.0 SP4 or later. There were serious problems with many ISAPI extensions built with earlier versions of the MFC libraries. 2 problems are documente...

Microsoft Internet Explorer 5/6 - OBJECT Tag Same Origin Policy Violation

source: https://www.securityfocus.com/bid/5196/info Microsoft Internet Explorer allows script code to violate the same origin policy through usage of the HTML OBJECT tag. Malicious script code may obtain a legitimate reference to an embedded object containing a web page from the same domain. This...

cqure.net.20020412.netware_client.a

cqure.net Security Vulnerability Report No: cqure.net.20020412.netwareclient.a ======================================== Vulnerability Summary --------------------- Problem: Multiple buffer overflow conditions exist in the Novell Netware client for Windows. Threat: An attacker could crash any...

CVE-2002-0170

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...

Microsoft Internet Information Server (IIS) vulnerable to DoS when URL request exceeds maximum allowed length

Overview Intruders may be able to cause the IIS service to fail by sending a particular kind of overly-long URL. Description ISAPI is a programming interface to IIS that can be used to modify or extend the behavior of IIS. Programs written using ISAPI are known as either filters or extension,...

Fw: Multiple Vulnerabilties in Sambar Server

----- Original Message ----- From: NGSSoftware Insight Security Research Advisory NISR To: [email protected] Sent: Monday, April 01, 2002 12:07 PM Subject: Multiple Vulnerabilties in Sambar Server NGSSoftware Insight Security Research Advisory Name: Sambar Server 5.0 server.exe Systems...

Linksys BEFVP41 VPN Server does not follow proper VPN standards

Dear all, A month ago, we discovered a bug in the VPN Server module of the Linksys EtherFast BEFVP41 Cable/DSL VPN Router. Here's the detailed email we sent to Linksys Tech Support: Begin Email Dear Support @ Linksys, We recently heard about your BEFVP41 and thought we'd try it out as we liked th...

CVE-1999-1356

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

CVE-1999-1356

Technical details about this CVE are not provided in the supplied documents; no affected product/version or remediation details are present. Monitor for updates.

Sun Java Virtual Machine 1.2.2/1.3.1 - Segmentation Violation

source: https://www.securityfocus.com/bid/3992/info Java programs run in an intepreted environment, the Java Virtual Machine JVM. Sun has provided a reference JVM implementation for multiple platforms, including Solaris, Windows and Linux. It is possible for a maliciously constructed, valid java...

Addendum Re: Internet Explorer Pop-Up OBJECT Tag Bug

Pop-Up Bug Notes First, adding an addendum about the bug which Dave Ahmad discovered: This can be used with the window object as well, when setting the document body's innerHTML property and using method "window.open". This information has been forwarded to the vendor. Secondly, there are a numbe...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

Microsoft Windows NT 3/4.0 - CSRSS Memory Access Violation

// source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this service and will halt if the service stops for any reason...

Microsoft Windows NT 34.0 - CSRSS Memory Access Violation

Microsoft Windows NT 34.0 - CSRSS Memory Access Violation // source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this...

gm4 format strings on OSX

This in itself is not an issue due to the lack of a suid bit... however if I remember correctly there were a few linux suid root binaries that were reliant upon m4 in some way or another thus making them vulnerable to a local root expoit. This is on osx 10.1. OSXBOX: elguapo ls -al which m4...

def-2001-29

====================================================================== Defcom Labs Advisory def-2001-29 Ipswitch Web Calendaring 7.04 Buffer Overflow Author: Andreas Junestam [email protected] Release Date: 2001-10-12 ======================================================================...