Vulnerabilidades

El componente IRC de Trillian 0.73 y 0.74 permite a servidores IRC remotos malintencionados causar la Denegación de Servicio (por caida)mediante el envío de mensajes 'no preparados' (raw messages): 206, 211, 213, 214, 215, 217, 218, 243, 302, 317, 324, 332, 333, 352, y 367.

El componente IRC de Trillian 0.73 y 0.74 permite a servidores IRC maliciosos causar la Denegación de Servicos (DoS) (por caida) mediante un mensaje PART con: un canal desaparecido/no existente. un canal al que el usuario de Trillian no esta conectado. user is not in.

El componente AIM de Trillian 0.73 y 0.74 permite a atacantes remotos provocar una denegación de servicio (caída) mediante determinadas cadenas de caracteres tales como "P > O < C".

Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message.

Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Windows, and as such, such…

Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.

ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.

Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.

AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.

Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.

El programa CGI mailfile.cgi en MailFile 1.10 permite a atacantes remotos leer archivos arbitrarios especificando el nombre del archivo objetivo en el parámetro 'filename' en una solicitud POST, que luego es enviado por correo electrónico a la dirección especificada en el parámetro 'email'.

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.

The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.