CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

CVE-2005-2858

The CVE-2005-2858 issue affects Rediff Bol 7.0 via the Fetch.FetchContact.1 ActiveX control (Fetch.dll). The FullAddressBook method allows remote attackers to read the Windows Address Book, exposing contact information. Root cause is an unsafe FullAddressBook interface in the Fetch.FetchContact.1...

PT-2005-3723 · Microsoft +1 · Windows +3

Name of the Vulnerable Software and Affected Versions: Rediff Bol version 7.0 Description: The issue allows remote attackers to read the Windows Address Book. This is achieved via the FullAddressBook method of the Fetch.FetchContact.1 ActiveX control, which is part of the Fetch.dll component...

CVE-2005-2858: Undefined Security Weakness

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

Rediff Bol 7.0 ActiveX information leak

With FullAddressBook method of Fetch.FetchContact.1 ActiveX control it's possible to obtain whole Windows address book...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerab...

[Full-disclosure] Rediff Bol 7.0 WAB Contacts

Rediff Bol 7.0 WAB Contacts Affected Program : Rediff Bol 7.0 It is a popular instant messenger from Rediff.com Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability Description : Rediff Bol's ActiveX control Fetch.FetchContact.1 / Fetch.dll allows a...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script var Obj = new...

CVE-2005-2696: Undefined Security Weakness

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

IBM Lotus Domino HTML Hidden Field Encrypted Password Disclosure

The remote host is running a version of Lotus Domino Server that is prone to several information disclosure vulnerabilities. Specifically, users' password hashes and other data are included in hidden fields in the public address book 'names.nsf' readable by default by all users. Moreover, Domino...

CVE-2005-1282

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2005-1282: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

Lotus Domino Address Book Information Disclosure

Binary data 2567.prm...

Multiple Cross Site Scripting Vulnerabilities in eGroupWare

--------------------------------------------------------------------------- Multiple Cross Site Scripting Vulnerabilities in eGroupWare --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...

Cyrus IMSP remote root vulnerability

n.runs GmbH http://www.nruns.com/ [email protected] n.runs-SA-2003.001 15-Dec-2003 Vendor: Andrew Systems Group, Carnegie Mellon cmu.edu Product: Cyrus IMSP Vulnerability: Buffer overflow in address book handling Affected Releases: 1.4, 1.5a6, 1.6a3, 1.7 NOT Affected Releases: - Severty: HIGH CE...

Blackboard 5.x Password Retrieval

-- Overview Through the exploitation of a SQL injection vulnerability it is possible for an unauthenticated user to query the Blackboard user directory and: - Enumerate users with a given password. - Extract the MD5 password of any given user. Blackboard Learning System 5.x, level 1 and 2 are...

IceWarp Webmail XSS

DarC KonQuesT XSS Release- Product: IceWarp Webmail 3.3.3 tested, others possibly vulnerable Vendor: IceWarp Software - E-mail: [email protected] Web: www.icewarp.com Problem: Cross Site Scripting Severity: Mild-Moderate Operating Systems: Tested against Win2k but all others if objects are handled...

CVE-2001-1088

Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof...

CVE-1999-1172: Undefined Security Weakness

By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared...

Microsoft Outlook 9798200045 - Address Book Spoofing

Microsoft Outlook 9798200045 - Address Book Spoofing source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that...