CVE-2004-2482

Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property ...

CVE-2005-2512

Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak...

CVE-2005-1627

Unknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the Viewglob display and ssh X forwarding," has unknown impact...

CVE-2005-1627

Technical details are not publicly available in the provided documents for CVE-2005-1627. Monitor for updates and further disclosures; current sources provide only a generic unknown vulnerability in Viewglob before 2.0.1 .

CVE-2005-1627

Unknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the Viewglob display and ssh X forwarding," has unknown impact...

CVE-2005-1318

Cross-site scripting XSS vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1318

The CVE-2005-1318 entry concerns Horde Forwards E-Mail Forwarding Manager prior to 2.2.2, which is vulnerable to cross-site scripting (XSS) via the parent frame page title. The affected component is the Forwarding Manager’s web interface; the root cause is improper handling of the frame title lea...

CVE-2004-1653

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

CVE-2004-1521

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers...

CVE-2004-0468

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service memory exhaustion and device reboot via certain IPv6 packets...

Eudora 6.2.0.7 Attachment Spoofer Exploit

No description provided by source. !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script...

Debian DSA-389-1 : ipmasq - insecure packet filtering rules

ipmasq is a package which simplifies configuration of Linux IP masquerading, a form of network address translation which allows a number of hosts to share a single public IP address. Due to use of certain improper filtering rules, traffic arriving on the external interface addressed for an intern...

Weak SSH default ocnfiguration

TCP forwarding is allowed by default, it creates security problem for anonymous SSH access for example with CVS...

CVE-2002-0668

The CVE-2002-0668 issue affects Pingtel xpressa SIP phones (software versions 1.2.5–1.2.7.4). A web interface vulnerability allows an authenticated user to modify Call Forwarding settings, hijacking calls by redirecting them to another SIP URL or number. The root cause is exposure of administrati...

CVE-2002-0668

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forwarding settings and hijack calls...

CVE-2002-1189

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding...

CVE-2002-1189

The CVE-2002-1189 issue affects Cisco Unity 2.x and 3.x where default configuration fails to block international operator calls in predefined restriction tables, enabling authenticated users to place international calls via call forwarding. The root cause is the misconfiguration of restrictions r...

PT-2004-2559 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program suc...

OpenSSH Client < 2.3.0 X11 Unauthorized Remote Forwarding

Binary data 1979.prm...

Pegasus Mail <= 3.12c mailto: Embedded URL File Forwarding Weakness

Binary data 1302.prm...