CVE-2003-0814

CVE-2003-0814 affects Internet Explorer 6 SP1 and earlier. The flaw, known as ExecCommand Cross Domain, allows a malicious page to bypass cross-domain zone restrictions and execute Javascript or potentially run code in the user’s context by abusing the window.execCommand('Refresh') flow. Connecte...

Microsoft Exchange 2003 OWA NTLM wrong mailbox access

If NTLM authentication is used with front-end server it possible random access to wrong mailbox...

Microsoft Security Bulletin MS04-002

Microsoft Security Bulletin MS04-002 Print Vulnerability in Exchange Server 2003 Could Lead to Privilege Escalation 832759 Issued: January 13, 2004 Version: 1.0 Summary Who should read this document: System administrators who have servers that are running Microsoft® Outlook® Web Access for...

MS04-002: Exchange Privilege Escalation (832759)

The remote host is running an unpatched version of Microsoft Exchange that could allow an attacker with a valid Exchange account to access another user's mailbox using Outlook for Web Access C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11989; scriptversion"1.39";...

CVE-2003-0904

Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...

CVE-2003-1026

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back back function is called, as demonstrated by BackToFramedJpu, aka th...

CVE-2003-1028

CVE-2003-1028 : The vulnerability lies in the download function of Internet Explorer 6 SP1, where an HTTP response with an invalid Content-Type and a .htm file can disclose the cache directory name. This information disclosure could allow remote attackers to bypass security measures that rely on ...

CVE-2003-0696

The CVE-2003-0696 entry concerns the getipnodebyname() API in IBM AIX 5.1 and 5.2. The root cause is that sockets are not properly closed, which can lead to a denial of service via resource exhaustion. Affected software: AIX 5.1/5.2; vulnerable component: getipnodebyname() API; impact described a...

CVE-2003-1027

CVE-2003-1027 is a remote-code-execution vulnerability related to Internet Explorer’s handling of drag-and-drop. The Drag-and-Drop Vulnerability (CAN-2005-0053) updates address this and is explicitly stated as a variation of CVE-2003-1027. Affected software includes IE 5.01 through 6 SP1 (and rel...

CVE-2003-1028

The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid1000...

[SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha)

-------------------------------------------------------------------------- Debian Security Advisory DSA 417-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2004 http://www.debian.org/security/faq -...

CVE-2003-1025

CVE-2003-1025 involves Internet Explorer 5.01–6 SP1 and is caused by an improper URL canonicalization in the HTTP URL parsing, enabling remote spoofing of the address bar with a specially crafted URL (example: a %01 before an @ sign). The vulnerability could let a malicious page display a false a...

CVE-2003-1023

Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...

CVE-2003-1024

The CVE-2003-1024 entry affects the Sun Solaris tcsh(1) built-in ls-F command on Solaris 8. The root cause is a vulnerability in the ls-F implementation that could allow a local unprivileged user to create or delete files as another user and possibly gain privileges (up to the attacker’s describe...

CVE-2003-1023

CVE-2003-1023 affects Midnight Commander (mc) 4.6.0 and earlier. It is a stack-based buffer overflow in vfs_s_resolve_symlink (vfs/direntry.c) that could allow a remote attacker to execute arbitrary code during symlink conversion. The issue is documented in multiple advisories (e.g., Debian DSA-4...

CVE-2003-0990

The CVE-2003-0990 issue affects SquirrelMail 1.4.0 and the GPG Plugin 1.1, where the parseAddress code can be abused to execute shell commands via metacharacters in the To: field. This is a remote command-execution vulnerability exploitable via SMTP delivery (e.g., via crafted email contents) and...

CVE-2003-1023

Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...

CVE-2003-1012

The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets...

CVE-2003-0980

Cross-site scripting XSS vulnerability in FreeScripts VisitorBook LE visitorbook.pl allows remote attackers to inject arbitrary HTML or web script via 1 the "do" parameter, 2 via the "user" parameter from a host with a malicious reverse DNS name, 3 via quote marks or ampersands in other parameter...

CVE-2003-0981

FreeScripts VisitorBook LE visitorbook.pl logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting XSS attacks...