what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from m0fo

msnPlus.txt

Posted Nov 8, 2005

Authored by m0fo

MSN Plus! fails to properly verify an old password prior to allowing the changing of the current password.

tags | advisory

SHA-256 | 65f2ab68cbb5711864256a41d930f802e5d9045b194bc169d3c892725ade783c

Download | Favorite | View

msn_plus_pass_bypass.txt

Posted Apr 17, 2005

Authored by m0fo

MSN Plus "locking" can be bypassed by changing the lock password. Changing the lock password does not require knowing the current lock password.

tags | advisory

SHA-256 | dd112afee2d90828080399022d95ebfc61f1b905029955c8a62aa850ef5dc9c5

Download | Favorite | View

miranda_popupplus_overflow.txt

Posted Apr 17, 2005

Authored by m0fo

Miranda Instant Messenger with the PopUp Plus plugin is vulnerable to a simple, remotely executable buffer-overflow. Sending around 530 characters in an instant message will result in EIP getting overwritten. Version 2.0.3.8 is tested vulnerable, other versions may also be affected.

tags | exploit, overflow

SHA-256 | 9388a6a093a26bd802f38c4619101a03c09b99e55e7f9ff2854a3c79c6f858c0

Download | Favorite | View