Microsoft Agent Trusted Content Spoofing Vulnerability

Description Microsoft Agent is prone to a vulnerability that could allow a malicious website to spoof trusted content. This could result in a user downloading and executing malicious files thinking they are safe. Technologies Affected Microsoft Windows 2000 Advanced Server Microsoft Windows 2000...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that could allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Internet Explorer XML Redirect Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Specifically, it may be possible for remote users to read XML data from an affected computer via a malicious Web page. This issue is a variant of BID 5560. This variant was not addressed with the release ...

MS05-032: Vulnerability in Microsoft Agent Could Allow Spoofing (890046)

The remote version of Windows contains a flaw in the Microsoft Agent service that could allow an attacker to spoof the content of a website. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. C Tenable Network Security, In...

mikmod security update

CentOS Errata and Security Advisory CESA-2005:506 Updated mikmod packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. MikMod is a well known MOD music file player for UNIX-based systems. A buffer...

Fedora Core 3 : mikmod-3.1.6-31.FC3 (2005-404)

Mon Jun 06 2005 Martin Stransky 3.1.6-31.FC3 - fixed 159290,159291 - CVE-2003-0427 - fixed playing mod files from tar archive Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

IPSwitch IMAP Server LOGON Remote Stack Overflow

No description provided by source. / IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written by nolimit and BuzzDee First, some information for the few of you that know how this stuff works. The reason you see no SP2 or 2003 offsets is because of Windows SEH...

IPSwitch IMAP Server - LOGON Remote Stack Overflow

IPSwitch IMAP Server - LOGON Remote Stack Overflow / IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written by nolimit and BuzzDee First, some information for the few of you that know how this stuff works. The reason you see no SP2 or 2003 offsets is because o...

IPSwitch IMAP Server - LOGON Remote Stack Overflow

/ IpSwitch IMAP Server LOGON stack overflow. Software Hole discovered by iDEFENSE POC written by nolimit and BuzzDee First, some information for the few of you that know how this stuff works. The reason you see no SP2 or 2003 offsets is because of Windows SEH checks. Thats right, in this one...

RHEL 2.1 : kdbg (RHSA-2005:416)

An updated kdbg package that fixes a minor security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. Kdbg is a K Desktop Environment KDE GUI for gdb, the GNU debugger. Kdbg 1.1.0 through 1.2.8...

kdbg security update

CentOS Errata and Security Advisory CESA-2005:416-01 An updated kdbg package that fixes a minor security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. Kdbg is a K Desktop Environment KDE GUI...

CVE-2003-1216

CVE-2003-1216 affects phpBB 2.0.6 and earlier, due to a SQL injection in the search.php handling of the search_id parameter. The vulnerability can allow remote attackers to execute arbitrary SQL and potentially gain privileges. Public details list the affected component as search.php in phpBB pri...

CVE-2003-1215

CVE-2003-1215 describes an SQL injection in phpBB’s groupcp.php affecting 2.0.6 and earlier, exploitable via the sql_in parameter. This allows group moderators to perform unauthorized activities. The vulnerability is documented across multiple sources (NVD, CVE list, and Nessus plugin), with an e...

CVE-2003-1211

CVE-2003-1211 is an XSS vulnerability in MaxWebPortal 1.30 (and possibly earlier) affecting search.asp via the Search parameter. The issue allows remote attackers to inject arbitrary script/HTML. The provided documents do not specify a patch or workaround. No exploitation details are given in the...

CVE-2003-1214

Technical details about CVE-2003-1214 are not publicly available in the provided documents. Monitor for updates from official advisories; include affected product versions or fixes only if disclosed.

CVE-2003-1204

CVE-2003-1204 involves multiple cross-site scripting (XSS) flaws in Mambo Site Server 4.0.12 BETA and earlier. The authenticated-remote issue allows attackers to inject script via various parameters across several PHP scripts (sectionswindow.php, gallery.php, navigation.php, uploadimage.php, view...

CVE-2003-1208

CVE-2003-1208 describes multiple buffer overflows in Oracle 9i prior to 9.2.0.3 that allow a local attacker to execute arbitrary code by feeding overly long values to TIME_ZONE, NUMTOYMINTERVAL, NUMTODSINTERVAL, or FROM_TZ. The issue arises from excessive input in these functions, enabling a user...

CVE-2003-1210

The CVE-2003-1210 entry describes multiple SQL injection vulnerabilities in the PHP-Nuke Downloads module (versions 5.x through 6.5). The root cause is unsafely constructed SQL queries exposed via the lid parameter to getit and the min parameter to search, allowing remote attackers to execute arb...

CVE-2003-1209

The vulnerability CVE-2003-1209 affects Monkey HTTP Daemon prior to 0.6.2. A POST request without a Content-Type header can cause the server to crash, resulting in a denial of service. The description and connected records confirm the affected product (Monkey HTTP Daemon) and the root cause (like...

CVE-2003-1205

CVE-2003-1205 affects Crob FTP Server 2.60.1. Affected component: the FTP server’s file-rename handling. Root cause: remote authenticated users can trigger a denial of service (crash) by renaming a file to the MS-DOS device name “con.” Impact: DoS via crash; no other impacts described in the prov...