ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability

ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-033.html October 10, 2006 -- CVE ID: CVE-2006-2387 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3 Microsof...

[Full-disclosure] ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability

ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-030.html October 5, 2006 -- CVE ID: CVE-2006-5143 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup R11.5 Client...

ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability

ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-021.html July 6, 2006 -- CVE ID: CVE-2006-3423 -- Affected Vendor: WebEx Communications -- Affected Products: WebEx Downloader Plug-in tested on v2.0.0.7 -- TippingPointTM IPS...

ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability

ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-017.html June 13, 2006 -- CVE ID: CVE-2006-2382 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 All Versions Internet Explorer 5 SP4 --...

CVE-2006-0993

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

Information disclosure

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

CVE-2006-0993

The CVE affects 3Com TippingPoint SMS Server’s web management interface prior to version 2.2.1.4478, where access to certain directories is not restricted. This could allow remote attackers to view benign data such as the user manual and, in the context of backups, potentially reveal configuratio...

CVE-2006-0993

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

3COM TippingPoint SMS Server weak permissions

It's possible to access directories where sensitive information can be potentially stored through web interface...

ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability

ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-013.html May 9, 2006 -- CVE ID: CVE-2006-0993 -- Affected Vendor: 3Com TippingPoint -- Affected Products: TippingPoint SMS Server -- Vulnerability Details: This...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

Code injection

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 is vulnerable to a remote-denial-of-service caused by processing long DHCP packets. This vulnerability affects the device’s network operation, and the available documents do not provide exploit details or explicit reme...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

[SA19756] 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service

TITLE: 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service SECUNIA ADVISORY ID: SA19756 VERIFY ADVISORY: http://secunia.com/advisories/19756/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: 3Com Baseline Switch 2848-SFP Plus...

3COM 2848-SFP switch DoS

Device crash on long DHCP packet...

[Full-disclosure] ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability

ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-009.html April 14, 2006 -- CVE ID: CVE-2006-0749 -- Affected Vendor: Mozilla -- Affected Products: Firefox 1.0 through 1.0.7 Thunderbird 1.5 through 1.5.0.1 Thunderbird 1.0...

[SA18379] ClamAV Unspecified UPX File Handling Vulnerability

TITLE: ClamAV Unspecified UPX File Handling Vulnerability SECUNIA ADVISORY ID: SA18379 VERIFY ADVISORY: http://secunia.com/advisories/18379/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: A...

3Com 3CDaemon 2.0 FTP Username Overflow

This module exploits a vulnerability in the 3Com 3CDaemon FTP service. This package is being distributed from the 3Com web site and is recommended in numerous support documents. This module uses the USER command to trigger the overflow. This module requires Metasploit:...

[Full-disclosure] ZDI-05-003: Novell NetMail IMAPD Buffer Overflows

ZDI-05-003 - Novell NetMail IMAPD Buffer Overflows http://www.zerodayinitiative.com/advisories/ZDI-05-003.html November 18th, 2005 CVE ID: CAN-2005-3314 Affected Vendor: - Novell Affected Products: - Novell Netmail 3.5.2 TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...