Linux Kernel CIFSTCon()函数远程溢出漏洞

BUGTRAQ ID: 34453 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的fs/cifs/connect.c文件中的CIFSTCon函数存在缓冲区溢出漏洞。如果用户受骗连接到了恶意的服务器且服务器向客户端返回了特制的Tree Connect响应的话，就可以出发这个溢出，导致执行任意代码。以下是有漏洞的代码段： 3441 int 3442 CIFSTConunsigned int xid, struct cifsSesInfo ses, 3443 const char tree, struct cifsTconInfo tcon,...

CVE-2002-1917: Undefined Security Weakness

CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header...

CVE-2004-2137

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information...

CVE-2004-2137: Undefined Security Weakness

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information...

CVE-2004-2137

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information...

[SA12376] Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness

TITLE: Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness SECUNIA ADVISORY ID: SA12376 VERIFY ADVISORY: http://secunia.com/advisories/12376/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Outlook Express 6...

Microsoft Outlook Express information leak

Bcc: header may not be stripped for partial multipart MIME message...

Outlook Express BCC: Recipient Disclosure

Binary data 2150.prm...