Sun Java Virtual Machine 1.2.2/1.3.1 - Segmentation Violation

source: https://www.securityfocus.com/bid/3992/info Java programs run in an intepreted environment, the Java Virtual Machine JVM. Sun has provided a reference JVM implementation for multiple platforms, including Solaris, Windows and Linux. It is possible for a maliciously constructed, valid java...

Addendum Re: Internet Explorer Pop-Up OBJECT Tag Bug

Pop-Up Bug Notes First, adding an addendum about the bug which Dave Ahmad discovered: This can be used with the window object as well, when setting the document body's innerHTML property and using method "window.open". This information has been forwarded to the vendor. Secondly, there are a numbe...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

Microsoft Windows NT 34.0 - CSRSS Memory Access Violation

Microsoft Windows NT 34.0 - CSRSS Memory Access Violation // source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this...

Microsoft Windows NT 3/4.0 - CSRSS Memory Access Violation

// source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this service and will halt if the service stops for any reason...

gm4 format strings on OSX

This in itself is not an issue due to the lack of a suid bit... however if I remember correctly there were a few linux suid root binaries that were reliant upon m4 in some way or another thus making them vulnerable to a local root expoit. This is on osx 10.1. OSXBOX: elguapo ls -al which m4...

def-2001-29

====================================================================== Defcom Labs Advisory def-2001-29 Ipswitch Web Calendaring 7.04 Buffer Overflow Author: Andreas Junestam [email protected] Release Date: 2001-10-12 ======================================================================...

CVE-1999-1030

counter.exe 2.70 allows a remote attacker to cause a denial of service hang via an HTTP request that ends in %0A newline, which causes a malformed entry in the counter log that produces an access violation...

CVE-1999-1030

CVE-1999-1030 involves the CGI program counter.exe (v2.70). A remote attacker can trigger a denial of service (hang) by sending an HTTP request that ends with a newline (%0A), which creates a malformed entry in the counter log and leads to an access violation. The available connected documents co...

CVE-1999-1030: Undefined Security Weakness

counter.exe 2.70 allows a remote attacker to cause a denial of service hang via an HTTP request that ends in %0A newline, which causes a malformed entry in the counter log that produces an access violation...

Security Bulletin MS01-046

---------------------------------------------------------------------- Title: Access Violation in Windows 2000 IRDA Driver Can Cause System to Restart Date: 21 August 2001 Software: Windows 2000 Impact: Denial of Service Bulletin: MS01-046 Microsoft encourages customers to review the Security...

TransSoft Broker FTP Server 3.0/4.0/4.7/5.x - CWD Buffer Overflow

source: https://www.securityfocus.com/bid/2851/info Broker is a Windows FTP server from TransSoft. Versions of Broker are vulnerable to a denial of service. A CD or CWD command, argumented by an invalid '. .' dot-space-dot sequence can, if repeatedly issued, create a buffer overflow causing the...

[SX-20010320-2] - Microsoft ISA Server Denial of Service

FSC Internet Corp. / SecureXpert Labs Advisory SX-20010320-2 Denial of Service in Microsoft ISA server v1.0 Summary Microsoft ISA Server 1.0 on Windows 2000 Server SP1 is vulnerable to a simple network-based attack which stops all incoming and outgoing web traffic from passing through the firewal...

QPC POPd Buffer Overflow Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= QPC POPd Buffer Overflow Vulnerability =- Release date: Saturday, April 14, 2001 Introduction: QPC's popd is the pop3 mailserver component of the company's QVT/NET product line for MS Windows. The popd and the rest of the QVT/Net product li...

QPC FTPd Directory Traversal and BoF Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= QPC FTPd Directory Traversal and BoF Vulnerabilities =- Release date: Saturday, April 14, 2001 Introduction: QPC's ftpd is the ftp server component of the company's QVT/NET and QVT/Term software suites for MS Windows. The ftpd and the rest ...

Security Bulletin MS01-021

---------------------------------------------------------------------- Title: Invalid Web Request Can Cause Access Violation in ISA Server Web Proxy Service Date: 16 April 2001 Software: ISA Server 2000 Impact: Denial of service Bulletin: MS01-021 Microsoft encourages customers to review the...

Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service

Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service source: https://www.securityfocus.com/bid/1999/info Network Associates WebShield SMTP is an email virus scanner designed for internet gateways. In the event that WebShield SMTP receives an outgoing email...

Network Associates Webshield SMTP 4.5 - Invalid Outgoing Recipient Field Denial of Service

source: https://www.securityfocus.com/bid/1999/info Network Associates WebShield SMTP is an email virus scanner designed for internet gateways. In the event that WebShield SMTP receives an outgoing email containing six "%20" followed by any character within the recipient field, the application wi...

Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket

source: https://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the java.net.ServerSocket class to create a listening...

CVE-2000-0503

The CVE-2000-0503 entry concerns the IFRAME within the WebBrowser control of Internet Explorer 5.01. The issue allows a remote attacker to violate the cross-frame security policy via the NavigateComplete2 event. The description and connected records indicate the vulnerability is tied to the WebBr...