CVE-2004-0789

CVE-2004-0789 describes a DNS-based DoS where remote attackers can trigger CPU/network bandwidth exhaustion by causing a communications loop: (a) spoofed DNS queries using localhost as source, or (b) a crafted response that triggers another response. Affected implementations include Poslib/Posadi...

CVE-2020-13866

WinGate v9.4.1.5998 is affected by an Insecure Permissions Elevation of Privilege vulnerability: the installation directory grants full control to authenticated users, enabling local attackers to replace an executable with a Trojan horse and escalate privileges (often to SYSTEM) after a restart. ...

CVE-2006-2926

CVE-2006-2926 describes a stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate (6.1.1.1077 and earlier). Remote attackers could trigger it by sending a malformed long URL in HTTP requests to the proxy on port 80, potentially causing denial of service or arbitrary code execution. Pu...

CVE-1999-0291

CVE-1999-0291 concerns the WinGate proxy, where the proxy is installed without a password. The connected documents confirm this leads to an unauthenticated ability for remote attackers to redirect connections. The affected component is the WinGate proxy; the root cause is a passwordless/default c...

CVE-2008-3606

CVE-2008-3606 describes a heap-based buffer overflow in the IMAP service of Qbik WinGate 6.2.2.1137 and earlier. The vulnerability allows remote authenticated users to cause a denial of service (resource exhaustion) and may enable arbitrary code execution through a long argument to the LIST comma...

CVE-2006-4518

CVE-2006-4518 affects Qbik WinGate 6.1.4 and earlier. The vulnerability arises in processing DNS requests with compressed name pointers: a self-referencing pointer can trigger an infinite loop, causing the WinGate proxy to consume 100% of CPU and effectively deny service. Exploitation is unauthen...

CVE-2009-0802

CVE-2009-0802 affects Qbik WinGate HTTP Proxy Server. In transparent interception mode, the proxy uses the HTTP Host header to determine the remote endpoint, enabling a crafted page to force a client to send requests with a modified Host header. This can allow remote attackers to bypass access co...

CVE-1999-0290

The CVE-1999-0290 entry concerns the WinGate Telnet Proxy. Public sources indicate a denial of service can be triggered by establishing a large number of connections to localhost, leading to resource exhaustion and potential service disruption. Affected software: WinGate Telnet Proxy. The underly...

CVE-2000-1048

CVE-2000-1048 affects Wingate 4.1 Beta A and earlier, specifically the logfile service. A directory traversal vulnerability allows remote attackers to read arbitrary files by crafting an HTTP GET request that carries encoded characters in the URL (..). The provided sources confirm the existence o...

CVE-2004-0577

CVE-2004-0577 affects WinGate (notably 5.2.3 build 901 and 6.0 beta 2 build 942, plus 5.0.5). The vulnerability is an input-validation flaw in the wingate-internal path that allows remote, unauthenticated attackers to read arbitrary files from the root directory via a URL request to the wingate-i...

CVE-2004-0578

CVE-2004-0578 affects WinGate proxy/server software. Public records show an input-validation flaw in the wingate-internal path that allows remote attackers to read arbitrary files by using extra leading slashes in a URL (e.g., /wingate-internal/ and /wingate-internal//path). Affected versions inc...

CVE-1999-0441

CVE-1999-0441 describes a denial-of-service condition in WinGate devices caused by a buffer overflow in the Winsock Redirector Service. The vulnerability enables remote attackers to disrupt WinGate machines; the description does not specify affected versions, vectors, or exploit details beyond th...

CVE-2006-2917

WinGate IMAP server directory traversal vulnerability (CVE-2006-2917) affects WinGate 6.1.2.1094 and 6.1.3.1096, and possibly earlier builds before 6.1.4 Build 1099. An authenticated remote user can exploit directory traversal in IMAP commands (CREATE, SELECT, DELETE, RENAME, COPY, APPEND, LIST) ...

CVE-2007-4335

WinGate (Qbik WinGate) SMTP server before 6.2.2 is vulnerable to a remote denial-of-service due to a format-string vulnerability in its error-logging path. Affected products are WinGate 5.x and 6.x prior to 6.2.2; exploitation can crash the service by sending certain unexpected commands that trig...