1058 matches found
Blackboard 5.x Password Retrieval
-- Overview Through the exploitation of a SQL injection vulnerability it is possible for an unauthenticated user to query the Blackboard user directory and: - Enumerate users with a given password. - Extract the MD5 password of any given user. Blackboard Learning System 5.x, level 1 and 2 are...
IceWarp Webmail XSS
DarC KonQuesT XSS Release- Product: IceWarp Webmail 3.3.3 tested, others possibly vulnerable Vendor: IceWarp Software - E-mail: [email protected] Web: www.icewarp.com Problem: Cross Site Scripting Severity: Mild-Moderate Operating Systems: Tested against Win2k but all others if objects are handled...
CVE-2001-1088
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof...
Microsoft Outlook 9798200045 - Address Book Spoofing
Microsoft Outlook 9798200045 - Address Book Spoofing source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that...
Microsoft Outlook 97/98/2000/4/5 - Address Book Spoofing
source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by the user of the mail client. An...
Проблема с адресной книгой в Outlook Express (address book vulnerability)
Отправив письмо со специальным образом составленного адреса атакующий может получить часть переписки между двумя пользователями...
SECURITY.NNOV: Outlook Express address book vulnerability
Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Author : 3APA3A [email protected] Affected : Outlook Exress 5.5SP1 and prior Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes...
Microsoft Outlook Express address book vulnerability
Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Affected : Outlook Exress 5.5SP1 and prior Risk : Low/Average Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes Vendor URL :...
CVE-1999-0356
Summary of CVE-1999-0356 (ControlIT) : Affects ControlIT versions prior to 4.5. The issue is the use of weak encryption to store usernames and passwords in an address book, exposing confidentiality and integrity. Root cause: insecure storage of credentials due to weak encryption. No explicit expl...
CVE-1999-0356
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...
melissa.macro.virus.txt
Date: Fri, 26 Mar 1999 17:05:51 -0800 From: Aleph One To: [email protected] Subject: Melissa Macro Virus I normally don't allow virus posts through the list as they seldom represent a new threat, just a new example of an already existing one, but this one is getting enough play to warrant a...
CVE-1999-0356
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...
PT-1999-1045 · Controlit · Controlit
Name of the Vulnerable Software and Affected Versions: ControlIT versions prior to 4.5 Description: The issue concerns the use of weak encryption for storing usernames and passwords in an address book. Recommendations: For ControlIT versions prior to 4.5, update to a version that uses strong...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...