10535 matches found
MS Exchange Server Remote Code Execution Exploit (MS05-021)
漏洞描述：Microsoft Exchange是一款由微软开发的邮件服务程序。Microsoft Exchange Server中存在缓冲区溢出漏洞，攻击者可能利用此漏洞在主机上执行任意指令。 起因是Exchange SMTP Server在处理特殊的扩展SMTP verb时存在缓冲区溢出。漏洞可能允许攻击者连接到Exchange服务器的SMTP端口并发送精心构造的恶意命令，这些命令可能导致拒绝服务或以SMTP服务进程的权限运行攻击者所选择的代码。漏洞影响：受影响的软件： •Microsoft Exchange Server 2000 Service Pack 3 •Microsoft...
RHEL 4 : kernel (RHSA-2005:366)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:366 advisory. The Linux kernel handles the basic functions of the operating system. A flaw in the fibseqstart function was discovered. A local user could u...
RHEL 4 : xloadimage (RHSA-2005:332)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:332 advisory. The xloadimage utility displays images in an X Window System window, loads images into the root window, or writes images into a file. Xloadimage...
RHEL 2.1 : logwatch (RHSA-2005:364)
An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of...
CVE-2005-0093
This CVE entry is rejected/not used; the candidate was withdrawn and not a security issue.
CVE-2005-1165
CVE-2005-1165 affects Yager 5.24 and earlier. The provided records describe a remote denial of service (application crash) triggered by certain malformed data. The exact vulnerable component or root cause is not explicitly detailed in the connected documents. The publicly reported metrics from NV...
CVE-2005-1160
CVE-2005-1160 affects Firefox before 1.0.3 and Mozilla Suite before 1.7.7. The vulnerability arises in the privileged chrome UI where an attacker could override certain properties or methods of DOM nodes, enabling privilege escalation. Attacks demonstrated via the eval function or the Script obje...
CVE-2005-1163
CVE-2005-1163 describes multiple buffer overflows in Yager 5.24 and earlier that allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data. The NVD entries indicate a network-exposed vulnerability with low attack complexity and no auth...
CVE-2005-1156
CVE-2005-1156 affects Firefox <= 1.0.2 before 1.0.3, Mozilla Suite
CVE-2005-0752
The CVE-2005-0752 entry describes a remote code execution via the Plugin Finder Service (PFS) in Firefox, affected when a javascript: URL is used in the PLUGINSPAGE attribute of an EMBED tag. The vulnerability is tied to Firefox versions before 1.0.3, with an exploit occurring through a crafted E...
CVE-2005-1166
The CVE-2005-1166 entry concerns DameWare NT Utilities (DNTUS26) and MiniRemote Control (DWRCS) up to version 4.9, where the username and password are stored in memory in plaintext. This in-memory credential exposure could allow a local attacker to obtain sensitive information. The connected sour...
CVE-2005-1107
McAfee Internet Security Suite 2005 is affected by an insecure default file ACL vulnerability. According to iDEFENSE, the default ACL applied during installation allows non-Administrator users to modify installed files, enabling local privilege escalation to system level or to disable protection ...
CVE-2005-1171
CVE-2005-1171 is an XSS vulnerability affecting the phpBB datenbank module via mod.php, where the id parameter can be exploited to inject arbitrary script/HTML. The weakness stems from improper sanitization of user-supplied data, enabling remote attackers to execute script in the context of the v...
CVE-2005-1162
CVE-2005-1162: Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary script/HTML via (1) sEmail in owContactUs.asp, (2) bSub in owListProduct.asp, or (3) Name, (4) Email, or (5) Comment in owProductDetail.asp. Affected software: OneWorldSt...
CVE-2005-1168
CVE-2005-1168 affects MusicMatch (DiagCollectionControl.dll) in version 10.00.2047 and earlier. The vulnerability allows remote attackers to overwrite arbitrary files via the bstrSavePath argument, exposing a network-exploitable path with no authentication and compromising integrity (per NVD: AV:...
CVE-2005-1158
CVE-2005-1158 affects Mozilla Firefox prior to 1.0.3. The issue arises from missing security checks that allow an attacker to inject arbitrary JavaScript into privileged pages by abusing the sidebar’s _search target. This could enable code execution within the context of the affected site, as des...
CVE-2005-1155
CVE-2005-1155 affects Mozilla Firefox prior to 1.0.3 and Mozilla Suite prior to 1.7.7. The issue arises from favicon handling: a malicious page can supply a favicon LINK tag with a javascript: URL in the href, allowing remote code execution. Publicly documented in Red Hat/CentOS advisories RHSA-2...
CVE-2005-0976
AppleWebKit-based browsers (WebCore/WebKit) are affected by CVE-2005-0976, which allows remote attackers to read local files via the XMLHttpRequest component. The vulnerability affects Safari 1.2+ and OmniWeb 5.1+ (and other WebKit-based apps using file: URLs), triggered by attacker‑supplied cont...