3570 matches found
Back Door in Commercial Shopping Cart
Trojanized Commercial Shopping Cart =============================================================== Dansie Shopping Cart Version : 3.04 presumably earlier versions as well Author : Craig Dansie URL : http://www.dansie.net/ Language : Perl both NT and Unix platforms are vulnerable License :...
CVE-2000-0196
The CVE-2000-0196 entry concerns the Linux nmh package’s mhshow utility. A vulnerability in mhshow’s handling of MIME headers can cause a buffer overflow, enabling remote command execution by an attacker via a crafted email message. The description explicitly states that this allows remote attack...
EUVD-2000-0215
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list...
CVE-2000-0058
CVE-2000-0058 affects HotSync Manager (Handsᴘʀᴛ Visor ecosystem). The OpenVAS NASL entry describes a Denial of Service: sending garbage to TCP port 14238 can crash HotSync Manager. CVSS 2.0 base score 5.0 (Network, low complexity, no authentication). The NVD/CVE records cite an authentication iss...
CVE-1999-0850
CVE-1999-0850 affects Endymion MailMan. The vulnerability arises from default permissions that let local users read email or modify files, implying local access and partial confidentiality/integrity impact. The provided documents do not specify a patch, workaround, affected versions, or exploit d...
ms.outlook.spoof.txt
Date: Tue, 20 Apr 1999 15:10:05 -0700 From: Nate Lawson To: [email protected] Subject: Outlook 98 allows spoofing internal users Problem: Outlook uses a sender's Reply-To address silently, allowing a user to inadvertently send data to an Internet mail account when intending to reply to an...
ms.exchange.outlook.javascript.txt
Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...
CVE-1999-1448
Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as 1 dates before 1970, which cause a Divide By Zero error, or 2 dates that are 100 years after the current date, which causes a segmentation...
