IMP_MIME_Viewer_html class XSS vulnerabilities

The remote server is running at least one instance of IMP whose version number is between 3.0 and 3.2.1 inclusive. Such versions are vulnerable to several cross-scripting attacks whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code simply by reading an HTML message...

Horde IMP HTML MIME Viewer XSS Vulnerabilities

The target is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.5 inclusive. SPDX-FileCopyrightText: 2003-2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2001-1563

CVE-2001-1563 refers to a vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 where attackers could access servlet resources. The vendor advisory is vague about full scope, but a public remediation exists: Apache Tomcat 3.2.4 fixes this issue. While the exact root cause isn’t deta...

CVE-2005-0237

The International Domain Name IDN support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing...

CVE-2005-0237

The International Domain Name IDN support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing...

CVE-2002-1644

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges...

HP-UX PHSS_25221 : HPSBUX0110-173 Sec. Vulnerability in Tomcat 3.2.1 (VVOS) (rev.1)

s700800 11.04 VirtualVault 4.5 tomcat version tools : Security Vulnerability in Tomcat 3.2.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS25221. The text itself is copyright C Hewlett-Packard Developmen...

CVE-2005-0237

The International Domain Name IDN support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing...

PT-2004-3290 · Blue Coat · Blue Coat Security Gateway Os

Name of the Vulnerable Software and Affected Versions: Blue Coat Security Gateway OS versions 3.0 through 3.1.3.13 Blue Coat Security Gateway OS version 3.2.1 Description: The web-based Management Console in the affected software stores a private key and its passphrase in plaintext in a log file...

JBOSS 3.2.1: JSP source code disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, jboss 3.2.1 with jetty seems to be vulnerable to jsp source code disclosure. Trying to access the ServerInfo.jsp with an suffixed "00" shows the source code of this JSP. Seems to be a forgotten debug feature :-...

PT-2002-1625 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.9.9 OpenSSH versions 3.x prior to 3.2.1 Description: The issue allows remote and local authenticated users to gain privileges due to a buffer overflow. This occurs when Kerberos/AFS support and either...

[SECURITY] [DSA-090-1] xtel symlink vulnerabilities

Package : xtel Problem type : symlink attack Debian-specific: no The xtel a X emulator for minitel package as distributed with Debian GNU/Linux 2.2 has two possible symlink attacks: xteld creates a temporary file /tmp/.xtel-user without checking for symlinks. when printing a hardcope xtel would...

CVE-1999-1283

Opera 3.2.1 is affected by a vulnerability where a URL containing an extra / in the http:// tag can trigger a denial of service (application crash). Root cause is in URL handling within Opera 3.2.1 (no further technical specifics provided in the documents). Impact stated: availability degradation...

[SECURITY] [DSA-048-2] samba for sparc was incorrectly built

Package : samba Problem type : recompile of sparc packages Debian-specific: yes The updated samba packages that were mentioned in DSA-048-1 were unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 2.0.7-3.2.1 have bee...