ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability

ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-021.html July 6, 2006 -- CVE ID: CVE-2006-3423 -- Affected Vendor: WebEx Communications -- Affected Products: WebEx Downloader Plug-in tested on v2.0.0.7 -- TippingPointTM IPS...

ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability

ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-017.html June 13, 2006 -- CVE ID: CVE-2006-2382 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 All Versions Internet Explorer 5 SP4 --...

CVE-2006-0993

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

Information disclosure

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

CVE-2006-0993

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

CVE-2006-0993

The CVE affects 3Com TippingPoint SMS Server’s web management interface prior to version 2.2.1.4478, where access to certain directories is not restricted. This could allow remote attackers to view benign data such as the user manual and, in the context of backups, potentially reveal configuratio...

3COM TippingPoint SMS Server weak permissions

It's possible to access directories where sensitive information can be potentially stored through web interface...

ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability

ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-013.html May 9, 2006 -- CVE ID: CVE-2006-0993 -- Affected Vendor: 3Com TippingPoint -- Affected Products: TippingPoint SMS Server -- Vulnerability Details: This...

CVE-2006-0993: Undefined Security Weakness

The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

Code injection

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 is vulnerable to a remote-denial-of-service caused by processing long DHCP packets. This vulnerability affects the device’s network operation, and the available documents do not provide exploit details or explicit reme...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

3COM 2848-SFP switch DoS

Device crash on long DHCP packet...

CVE-2006-2054: Undefined Security Weakness

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

[SA19756] 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service

TITLE: 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service SECUNIA ADVISORY ID: SA19756 VERIFY ADVISORY: http://secunia.com/advisories/19756/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: 3Com Baseline Switch 2848-SFP Plus...

[Full-disclosure] ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability

ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-009.html April 14, 2006 -- CVE ID: CVE-2006-0749 -- Affected Vendor: Mozilla -- Affected Products: Firefox 1.0 through 1.0.7 Thunderbird 1.5 through 1.5.0.1 Thunderbird 1.0...

[SA18379] ClamAV Unspecified UPX File Handling Vulnerability

TITLE: ClamAV Unspecified UPX File Handling Vulnerability SECUNIA ADVISORY ID: SA18379 VERIFY ADVISORY: http://secunia.com/advisories/18379/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: A...

[Full-disclosure] ZDI-05-003: Novell NetMail IMAPD Buffer Overflows

ZDI-05-003 - Novell NetMail IMAPD Buffer Overflows http://www.zerodayinitiative.com/advisories/ZDI-05-003.html November 18th, 2005 CVE ID: CAN-2005-3314 Affected Vendor: - Novell Affected Products: - Novell Netmail 3.5.2 TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...

[Full-disclosure] ZDI-05-002: Clam Antivirus Remote Code Execution

ZDI-05-002: Clam Antivirus Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-05-002.html November 4th, 2005 -- CVE ID: CAN-2005-3303 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87 -- TippingPointTM IPS Customer Protectio...