236 matches found
iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability
Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...
CVE-2007-0221
CVE-2007-0221 is the IMAP Literal Processing Vulnerability in Microsoft Exchange Server 2000 SP3. The issue is an integer overflow in the IMAP4 service when processing literals in IMAP commands, allowing remote attackers to cause a denial of service (service hang). Connected advisories confirm th...
CVE-2006-0221
CVE-2006-0221 describes an SQL injection in the Admin Panel of Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS), exploitable via the (1) username or (2) password fields on index.asp. The underlying issue is unsafely constructed SQL statements that allow remote attackers to execu...
CVE-2005-0221
Cross-site scripting XSS vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2formsubject field...
CVE-2005-0221
Affected software: Gallery 2.0 Alpha (Gallery login.php). Vulnerability: Cross-site scripting (XSS) via g2_form[subject]. Root cause: user-supplied input in login form is not properly sanitized, allowing injection of arbitrary HTML/script. Impact: remote attacker could exploit to run script in a ...
CVE-2004-0221
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite...
CVE-2004-0221
Affected software / component: OpenBSD isakmpd (OpenBSD 3.4 and earlier). Root cause / weakness: Multiple payload handling flaws in isakmpd’s ISAKMP packet processing allow out-of-bounds reads when processing a Delete payload with a large number of SPIs, leading to a remote denial of service (cra...
CVE-2003-0221
The 1 dupatch and 2 setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack...
CVE-2003-0221
The CVE-2003-0221 entry concerns HP Tru64 UNIX 5.1B PK1 and earlier, where the (1) dupatch and (2) setld utilities are vulnerable to a local symlink attack that allows overwriting files and could lead to root privilege gain. Affected components are dupatch and setld; root-priority impact is state...
CVE-2002-0221
CVE-2002-0221 affects Etype Eserv 2.97. The issue is caused by remote attackers sending a large number of PASV commands, exhausting ports 1024–5000 and preventing the server from accepting valid PASV connections, resulting in a denial of service. Exploit details and mitigation are not provided in...
CVE-2002-0221
Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...
CVE-2001-0221
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges...
CVE-2001-0221
CVE-2001-0221 describes a buffer overflow in ja-xklock version 2.7.1 and earlier that can allow local users to gain root privileges. The affected component is ja-xklock (no vendor/version context beyond the versioning in the CVE). The connected documents confirm the generic impact (local privileg...
CVE-2001-0221
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges...
CVE-1999-0221
CVE-1999-0221 concerns Denial of Service against Ascend routers via remote admin port 150. Connected sources confirm the issue affects Ascend routers and is triggered through port 150, with the Red Hat advisory repeating the DoS description. The PT-1999-1015 entry reiterates the vulnerability nam...