Code injection

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

CVE-2006-0862

CVE-2006-0862 affects InfoVista PortalSE 2.0 Build 20087 on Solaris 8; an unspecified vulnerability allows remote attackers to read arbitrary files via a crafted URL. The issue is reported to occur without the IV00038969 hotfix. No public details on underlying root cause are provided beyond the v...

CVE-2006-0862

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

Sql injection

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the 1 GatewayID parameter in an add action in AddGatewaySettings.asp and 2 IP parameter in IPManager.asp...

CVE-2006-0581

CVE-2006-0581 refers to a SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8. The issue allows remote authenticated users to execute arbitrary SQL commands via the GatewayID parameter in AddGatewaySettings.asp and the IP parameter in IPManager.asp. The available sources confirm the ...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

[SA18551] MailSite Cross-Site Scripting and Denial of Service

TITLE: MailSite Cross-Site Scripting and Denial of Service SECUNIA ADVISORY ID: SA18551 VERIFY ADVISORY: http://secunia.com/advisories/18551/ CRITICAL: Less critical IMPACT: Cross Site Scripting, DoS WHERE: From local network SOFTWARE: MailSite 7.x http://secunia.com/product/6895/ MailSite 6.x...

[SA18495] EMC NetWorker Unspecified Code Execution Vulnerability

TITLE: EMC NetWorker Unspecified Code Execution Vulnerability SECUNIA ADVISORY ID: SA18495 VERIFY ADVISORY: http://secunia.com/advisories/18495/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Legato NetWorker 7.x http://secunia.com/product/2692/...

[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow

TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...

AOL You've Got Pictures ActiveX control buffer overflow

Overview The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a...

Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer (905915)

Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer 905915 Published: December 13, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

ieDoS.pm.txt

/ Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed Disclaimer: This code is for...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows 2000 server SP4. The issue does...

Microsoft Windows Metafile - gdi32.dll Denial of Service (MS05-053)

Microsoft Windows Metafile - gdi32.dll Denial of Service MS05-053 / Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix fo...

MS Windows Metafile (gdi32.dll) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ==================================================================== MS Windows Metafile gdi32.dll Denial of Service Exploit MS05-053 ==================================================================== / Author: Winny Thomas Pune, INDIA The...

MS Windows Metafile (gdi32.dll) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed...

Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)

/ Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed Disclaimer: This code is for...

IMail IMAP STATUS buffer overflow

Added: 11/29/2005 CVE: CVE-2005-1256 BID: 13727 OSVDB: 16806 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, and a web interface and web calendaring service. Problem A buffer overflow when processing long mailbox names specified in the STAT...

MailEnable IMAP Server (meimaps.exe) Crafted RENAME Command Remote DoS

The remote host is running MailEnable, a commercial mail server for Windows. The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to crash due to incorrect handling of mailbox names in the rename command. An authenticated,...