CVE-2008-5871

CVE-2008-5871 affects Nortel Multimedia Communication Server (MSC) 5100, version 3.0.13. The underlying issue is that the system does not verify credentials during call placement, enabling remote attackers to spoof and redirect VoIP calls. The impact is partial confidentiality/integrity/availabil...

CVE-2008-5100

CVE-2008-5100 concerns the strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 . The description in multiple connected sources states that SN validation relies on the Public Key Token embedded in the DLL’s pathname rather than the file’s own digital signature. This design flaw c...

Nortel MCS 5100 UFTP多个拒绝服务漏洞

BUGTRAQ ID: 31633 CNCAN ID：CNCAN-2008100911 Nortel MCS 5100是一款多媒体通信服务器。 Nortel MCS 5100使用UNIStim文件传送协议UFTP，UFTP可在可靠的UDP上通过UNIStim控制通道来传送。处理UFTP消息存在缺陷，控制多个连接细节字段Connection Details fields的值可导致多个拒绝服务攻击。 Nortel Networks MCS 5100 3.0.13 Nortel Networks MCS 5100 3.0 MCS 5100 3.5.9已经修正此漏洞：...

CVE-2007-5100

CVE-2007-5100 describes PHP remote file inclusion in phpBB Plus 1.53 and 1.53a prior to 2007-09-22. The vulnerability occurs when register_globals is enabled and an attacker can craft a URL that sets phpbb_root_path to include arbitrary PHP code via language/lang_german/lang_main_album.php, langu...

CVE-2007-5100

Multiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 language/langgerman/langadminalbum.php, 2...

雅虎通ywcvwr.dll远程堆溢出漏洞

BUGTRAQ ID: 25330 雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理畸形功能请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 雅虎通中有个名为webcam的功能。当webcam请求初始化的时候雅虎通会生成一个类（webcamclass），webcamclass会在这个地方（ywcvwr.dll）申请一段内存，这段内存的长度是0x400： .text:10001737 cmp edi, esp+0Ch+arg0 .text:1000173B jl short loc10001735 .text:1000173D cmp edi, 1400000h...

CVE-2006-6742

CVE-2006-6742 affects HP LaserJet 5000 (firmware R.25.15/R.25.47) and LaserJet 5100 (firmware V.29.12) printers. Multiple buffer overflows in the FTP Print Server 2.4/2.4.5 allow remote attackers to crash the device via long LIST or NLST commands. The available sources describe the affected model...

HP Printers FTP Server Denial Of Service

HP FTP Printer Server Denial Of Service --------------------------------------- Author: Joxean Koret Date: 2006 Location: Basque Country Affected Software ----------------- Vendor: Hewlett Packard Description: HP Printers FTP Server Denial Of Service Description ----------- A problem exists in...

CVE-2006-5100

CVE-2006-5100 affects WEB//NEWS (aka webnews) 1.4 and earlier. The vulnerability is a PHP remote file inclusion in parse/parser.php that lets an attacker supply a URL via the WN_BASEDIR parameter and cause remote PHP code execution. Affected component is the webnews parser; root cause involves in...

CVE-2006-3663

CVE-2006-3663 affects Finjan Vital Security Appliance 5100/8100 NG; 8.3.5 stores passwords in plaintext in a backup file, allowing local users to gain privileges. The vendor has notified CVE that this issue was fixed in 8.3.6. Remediation: upgrade to 8.3.6 (or later) to mitigate. The impact is lo...

Microsoft Internet Explorer WMF Image Parsing Memory Corruption Vulnerability

Description Microsoft Internet Explorer is affected by an WMF image-parsing memory-corruption vulnerability. This issue is allegedly due to an integer-overflow flaw that leads to corrupted heap memory. This problem presents itself when a user views a malicious WMF-formatted file containing...