Sql injection

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the 1 GatewayID parameter in an add action in AddGatewaySettings.asp and 2 IP parameter in IPManager.asp...

CVE-2006-0581

CVE-2006-0581 refers to a SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8. The issue allows remote authenticated users to execute arbitrary SQL commands via the GatewayID parameter in AddGatewaySettings.asp and the IP parameter in IPManager.asp. The available sources confirm the ...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

[SA18551] MailSite Cross-Site Scripting and Denial of Service

TITLE: MailSite Cross-Site Scripting and Denial of Service SECUNIA ADVISORY ID: SA18551 VERIFY ADVISORY: http://secunia.com/advisories/18551/ CRITICAL: Less critical IMPACT: Cross Site Scripting, DoS WHERE: From local network SOFTWARE: MailSite 7.x http://secunia.com/product/6895/ MailSite 6.x...

[SA18495] EMC NetWorker Unspecified Code Execution Vulnerability

TITLE: EMC NetWorker Unspecified Code Execution Vulnerability SECUNIA ADVISORY ID: SA18495 VERIFY ADVISORY: http://secunia.com/advisories/18495/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Legato NetWorker 7.x http://secunia.com/product/2692/...

[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow

TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...

AOL You've Got Pictures ActiveX control buffer overflow

Overview The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a...

Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer (905915)

Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer 905915 Published: December 13, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

ieDoS.pm.txt

/ Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed Disclaimer: This code is for...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows 2000 server SP4. The issue does...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...

IMail IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1256 BID: 13727 OSVDB: 16806 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, and a web interface and web calendaring service. Problem A buffer overflow when processing long mailbox names specified in the STAT...

Microsoft Windows Metafile - gdi32.dll Denial of Service (MS05-053)

Microsoft Windows Metafile - gdi32.dll Denial of Service MS05-053 / Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix fo...

MS Windows Metafile (gdi32.dll) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ==================================================================== MS Windows Metafile gdi32.dll Denial of Service Exploit MS05-053 ==================================================================== / Author: Winny Thomas Pune, INDIA The...

Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)

/ Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed Disclaimer: This code is for...

MS Windows Metafile (gdi32.dll) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed...

MailEnable IMAP Server (meimaps.exe) Crafted RENAME Command Remote DoS

The remote host is running MailEnable, a commercial mail server for Windows. The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to crash due to incorrect handling of mailbox names in the rename command. An authenticated,...

horde -- Cross site scripting vulnerabilities in MIME viewers

Announce of Horde 3.0.7 final: This 3.0.7 is a security release that fixes cross site scripting vulnerabilities in two of Horde's MIME viewers. These holes could for example be exploited by an attacker sending specially crafted emails to Horde's webmail client IMP. The attack could be used to ste...

Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Hotfix to fix Unchecked Buffer in PPTP Implementation Q329834 is not installed. A security vulnerability results in the Windows 2000 and Windows XP implementations because of an unchecked buffer in a section of code that processes the control data used to establish, maintain and tear down PPTP...

Zope ZClass Permission Mapping Bug

The remote web server contains an application server that is prone to a privilege escalation flaw. Description : The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for...