Microsoft Outlook Express 6.0 - URI Obfuscation

source: https://www.securityfocus.com/bid/10345/info Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. This issue is reported to affect version 6.0 of the affected software, other versions might also be affected. An attacker could reportedly get a user to visit...

CVE-2004-0420

CVE-2004-0420 describes a remote code execution in the Windows Shell when a file is spoofed via a CLSID in the filename. The vulnerability affects Windows 98, Me, NT 4.0, 2000, XP, and Server 2003, enabling an attacker who lures a user to a malicious Web page to execute arbitrary code with the us...

Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service

Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service source: https://www.securityfocus.com/bid/10163/info A denial of service vulnerability has been reported in Macromedia ColdFusion MX that is reported to occur when the software attempts to write oversized error messages. The...

CVE-2004-0305

CVE-2004-0305 describes a cross-site scripting (XSS) vulnerability in WebCortex WebStores 2000 version 6.0, specifically in error.asp. The underlying issue is the handling of the Message_id parameter, enabling remote attackers to execute arbitrary scripts in the context of other users’ sessions a...

CVE-2004-0267

The 1 inoregupdate, 2 uniftest, or 3 unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp...

PT-2004-1421 · Ca · Etrust Inoculateit

Name of the Vulnerable Software and Affected Versions: eTrust InoculateIT for Linux version 6.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on files in /tmp, specifically through the inoregupdate, uniftest, or unimove scripts. Recommendations: For...

waraxe-2004-SA010.txt

=============================================================================== = waraxe-2004-SA010 =============================================================================== = Multiple vulnerabilities in Error Manager v2.1 for PhpNuke...

[local problems] eTrust Virus Protection 6.0 InoculateIT for linux

author: l0om [email protected] software: eTrust Virus Protection 6.0 InoculateIT for linux local phun with etrust antivirus 6.0 inoculateIT linux eTrust InnoculateIT 6.0 comes for the following OSes: -windows 95/98/ME -windows nt 4.0/2000 -novell netware 3.x 4.x 5.x -lotus notes/domino -mircosoft...

Networker 6.0 - possible symlink attack

product: networker 6.0 date: 19.01.2003 author: l0om [email protected] possible symlink attack in shutdown scribt the networker is a backup and storeage system from fujitsu siemens. the shutdown nsrshutdown scribt from networker version 6.0 contains a the following: zeroworklist ... rm -f...

CVE-2003-0904

Microsoft Exchange 2003 and Outlook Web Access OWA, when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Servic...

CVE-2003-0904

Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...

CVE-2003-0996

CVE-2003-0996 concerns an unknown “System Security Vulnerability” in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 that could allow a local attacker to gain privileges via the help interface. The NVD entry assigns a CVSSv2 base score of 4.6 (MEDIUM) with LOCAL attack vector and part...

CVE-2003-0997

CVE-2003-0997 refers to an unknown denial-of-service flaw in Computer Associates’ Unicenter Remote Control (URC) 6.0. The vulnerability allows an attacker to trigger CPU consumption in the URC host service, potentially impacting availability. Public detail is limited in the provided documents; a ...

Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability

Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability --------------------------------------------------------------- There is a Cross-Site-Scripting Vulnerability in Fastream NetFile FTP/Webserver Version 6.0.3.588. Requesting a non existing URL will give a "404 Not Found" answer, containing the...

Eudora 6.0 attachment spoof, exploit

Eudora 6.0 was released recently; I tested the Windows version only. It still contains several vulnerabilities, the most serious being an execute-any-code bug. It is distressing that the "spoof and steal" bug was pointed out years ago; the execute-any-code bug in 5.2.1 was sent to Qualcomm on 29...

CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

IIS 6.0 Web Admin Multiple vulnerabilities

Hi, last week I installed Windows 2003 for the first time Enterprise edition and Web Server edition. My first objective was to check the security in the IIS 6.0 and of course my target was the Web Admin interfacethat comes with a lot of ASP's to play with ;- Some flaws were detected, the vendor h...

CVE-2003-0557

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...

CVE-2003-0557

CVE-2003-0557 describes an SQL injection vulnerability in login.asp for StoreFront 6.0 (and possibly earlier versions). The issue allows remote attackers to obtain sensitive user information via SQL statements in the password field. Per NVD metrics, the base score is 7.5 (HIGH) with network acces...

CVE-2002-0024

CVE-2002-0024 affects Internet Explorer 5.01, 5.5 and 6.0. The issue allows an attacker to abuse Content-Disposition and Content-Type HTML headers to alter how a downloaded file’s name is displayed, potentially deceiving users into opening unsafe files. Exploitation details are not provided in th...