SOL5576 - Authentication vulnerability in Apache mod_digest - CAN-2003-0987

Vulnerability description moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret. Information about this advisory is available at the following location:...

SOL5873 - PAM conversation stack corruption in OpenSSH - CVE-2003-0787

Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge...

SOL2617 - Reverse name resolution vulnerability in SSH - CVE-2003-0386

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

SOL2355 - Timing attacks on RSA private keys - CAN-2003-0147

Information about this advisory can be found at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge...

CVE-2003-1327

CVE-2003-1327 affects wu-ftpd 2.6.2 and earlier when compiled with the MAIL_ADMIN option. A bounds/overflow issue in the SockPrintf path used to construct administrator notifications can allow remote anonymous users to execute arbitrary code by uploading a file with a very long pathname. The vuln...

Design/Logic Flaw

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...

CVE-2007-2593

The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...

Microsoft Windows 2003 Terminal Server TLS downgrade attack

Connection is established without encryption after unsuccessful authentication even if server setting require one...

Microsoft IE HTML对象脚本错误远程代码执行漏洞（MS07-027）

Internet Explorer是微软发布的非常流行的操作系统。 IE在处理内存访问的方式上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 Internet Explorer尝试访问未初始化的内存。因此，内存可能以一种攻击者可以在登录用户的上下文中执行任意代码的方式受到破坏。攻击者者可以通过构建特制的网页来利用这些漏洞。 如果用户查看网页，这些漏洞可能允许远程执行代码。成功利用这些漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 7.0 - Microsoft Windows XP SP2 - Microsoft Windows Vist...

Microsoft Excel BIFF记录远程栈溢出漏洞（MS07-023）

Microsoft Excel是Office套件中的电子表格工具。 Excel在解析BIFF文件格式时存在栈溢出漏洞，在处理畸形的Named Graph记录时可能未经检查便将用户提供的数据拷贝到了栈中，触发这个溢出，导致在用户系统上执行任意指令。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 2000 SP3 临时解决方法： 不要打开不可信任来源的Excel文档。 厂商补丁： Microsoft ---------...

cmd or shell under the Read terminal of the port-bug warning-the black bar safety net

General method regedit /e c:\3389.reg "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" type c:\3389.reg | find "PortNumber" del c:\3389.reg 2. xp and 2 0 0 3 Under reg query "HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Control\Terminal...

Microsoft IE表格列删除内存破坏漏洞（MS07-027）

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的CTableCol::OnPropertyChange方式存在内存破坏漏洞，远程攻击者可能利用此漏洞控制用户机器。 如果HTML中的命名表格行包含有命名表格列，然后调用了deleteCell JavaScript方式，则删除操作后所访问的任何表格列属性（无论是否存在）都会触发可利用的内存破坏，导致在用户系统上执行任意指令。 Microsoft Internet Explorer 6 for Windows XP SP2 Microsoft Internet Explorer 6 f...

Microsoft Excel Filter记录远程代码执行漏洞（MS07-023）

Microsoft Excel是Office套件中的电子表格工具。 Excel在处理Excel BIFF8格式电子表格文件中的AutoFilter记录时存在输入验证错误，如果用户受骗打开了包含有畸形过滤记录的特制文档的话，就可能导致无效的内存访问，在用户系统上执行任意代码。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 2000 SP3 Microsoft Office 2004 for Mac 临时解决方法： 不要打开不可信任来源的Excel文档...

Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)

Determina Security Research Exchange Calendar MODPROPS Denial of Service http://www.determina.com/security.research/vulnerabilities/exchange-ical-modprops.html CVE ID: CVE-2007-0039 MS ID: MS07-026 Vendor notification: Dec 20, 2006 Vendor patch: May 8, 2007 Systems Affected: Exchange 2000 Exchang...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO query string in "every main page," as demonstrated by default.asp...

CVE-2007-2581

Multiple cross-site scripting XSS vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO query string in "every main page," as demonstrated by default.asp...

CVE-2007-2531

CVE-2007-2531 affects Berylium2 (2003-08-18) where PHP remote file inclusion is possible in berylium-classes.php via the beryliumroot parameter. The underlying issue is including a remote file without proper validation, allowing an attacker to execute arbitrary PHP code on the affected system. Pu...

Memory corruption

Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption...

Code injection

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

CVE-2007-0947

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML...