CVE-2006-4654

CVE-2006-4654 affects Easy Address Book Web Server 1.2. The issue is a remote format-string vulnerability in the query string, allowing an attacker to cause a crash (DoS) or potentially compromise the server. The vulnerability is documented in multiple sources (NVD/NVD listing, CVE listing); expl...

CVE-2006-4654

Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service crash or "compromise the server" via encoded format string specifiers in the query string...

Canon ImageRunner reveals SMB, IPX, and FTP username/passwords

The Canon ImageRunner multi-function device’s Remote UI web interface software will reveal username and password pairs contained in address book entries when the address book is exported. These address book entries are used for scanning to SMB, FTP, or IPX shares. In addition, passwords for...

eabweb.txt

Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...

Easy Address Book Web Server Format String Vulnerability

Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...

Easy Address Book Web Server format string vulnerability

Format string vulnerability on URI request parsing...

Easy Address Book Web Server 1.2 - Remote Format String

Easy Address Book Web Server 1.2 - Remote Format String source: https://www.securityfocus.com/bid/19842/info Easy Address Book Web Server is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied data before including it in the...

CVE-2006-4056

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...

CVE-2006-4056

CVE-2006-4056 relates to multiple SQL injection vulnerabilities in the authentication process of the Address Book software: katzlbt (The Address Book 1.04e and earlier) and The Address Book Reloaded before 2.0-rc4. The flaw allows remote attackers to manipulate SQL via the (1) username or (2) pas...

CVE-2006-4056

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...

DEBIAN-CVE-2006-2789

Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service persistent crash via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used...

FreeBSD : turba -- XSS vulnerabilities in several of the address book name and contact data fields (eeebd55d-6a88-11da-b96e-000fb586ba73)

Announce of Turba H3 2.0.5 final : This 2.0.5 is a security release that fixes cross site scripting vulnerabilities in several of the address book name and contact data fields. None of the vulnerabilities can be exploited by unauthenticated users; however, we strongly recommend that all users of...

CVE-2006-1948

The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...

Design/Logic Flaw

The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...

CVE-2006-1948

The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...

CVE-2006-1948

The CVE-2006-1948 entry affects IBM Lotus Notes 6.0 and 6.5 before 20060331. The issue stems from AddSenderToAddressBook.lss and NameHelper.lss not storing information in the Personal Address Book when multiple messages are selected and a message uses AltFrom, enabling user-assisted remote attack...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Buffer overflow

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Microsoft Outlook Express buffer overflow

Buffer overflow on parsing WAB address book...

ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability

ZDI-06-007: Microsoft Windows Address Book WAB File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-007.html April 11, 2006 -- CVE ID: CVE-2006-0014 -- Affected Vendor: Microsoft -- Affected Products: Windows XP SP2 Windows 2000 SP4 -- TippingPointTM IPS Customer...