MS04-006: WINS Server Remote Overflow (830352) (uncredentialed check)

The remote Windows Internet Naming Service WINS is affected by a vulnerability that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet with improperly advertised lengths. C Tenable Network Security, Inc...

MailEnable IMAP Server Multiple Remote Buffer Overflows

The target is running at least one instance of MailEnable's IMAP service. Two flaws exist in MailEnable Professional Edition 1.52 and earlier as well as MailEnable Enterprise Edition 1.01 and earlier - a stack-based buffer overflow and an object pointer overwrite. A remote attacker can use either...

The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities

Overview The ActiveX and HTML file browsers in the Symantec Clientless VPN Gateway 4400 Series contain various unspecified vulnerabilities. Description The Symantec Clientless VPN Gateway 4400 Series is a stand-alone security appliance for connecting remote users to a trusted network via a virtua...

MS04-033: Microsoft Excel Code Execution (886836)

The remote host has a version of Microsoft Excel that is vulnerable to a code execution issue. An attacker could exploit this flaw to execute arbitrary code on the remote host with the privileges of the user opening the file. To exploit this flaw, an attacker would need to send a malformed Excel...

Debian DSA-043-1 : zope

This advisory covers several vulnerabilities in Zope that have been addressed.Hotfix 08092000 'Zope security alert and hotfix product' The issue involves the fact that the getRoles method of user objects contained in the default UserFolder implementation returns a mutable Python type. Because the...

Debian DSA-055-1 : zope - remote unauthorized access

A new Zope hotfix has been released which fixes a problem in ZClasses. The README for the 2001-05-01 hotfix describes the problem as any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for...

MS04-014: Microsoft Hotfix (credentialed check) (837001)

The remote host has a bug in its Microsoft Jet Database Engine 837001. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. To exploit this flaw, an attacker would need the ability to craft a specially malformed database query and have this engine execute i...

MS04-011: Microsoft Hotfix (credentialed check) (835732)

The remote host is missing a critical Microsoft Windows Security Update 835732. This update fixes various flaws that could allow an attacker to execute arbitrary code on the remote host. A series of worms Sasser are known to exploit this vulnerability in the wild. C Tenable Network Security, Inc...

MS04-012: Microsoft Hotfix (credentialed check) (828741)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12206; scriptversion"1.45"; scriptcvsdate"Date:...

F-Secure Anti-Virus for Linux fails to properly detect Sober.D virus

Overview F-Secure Anti-Virus for Linux contains a flaw that may prevent it from properly detecting the Sober.D virus. A hotfix for this vulnerability has been released. Description F-Secure Anti-Virus version 4.52 for Linux contains a flaw that may prevent it from properly detecting the Sober.D...

MS04-001: Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A buffer overflow vulnerability in the H.323 filter of the Microsoft ISA Server 2000 allows an attacker to execute arbitrary code on the remote host. An attacker can exploit this vulnerability by sending a specially crafted packet to the remote ISA Server. C Tenable Network Security, Inc...

MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

The remote host contains a version of the HTML Converter module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...

MS03-029: Flaw in Windows Function may allow DoS (823803)

The remote host is running a version of Windows NT 4.0 that has a flaw in one of its functions that could allow a user to cause a denial of service on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11802; scriptversion"1.34"; scriptcvsdate"Date: 2018/11/15...

MS03-024: SMB Request Handler Buffer Overflow (817606)

The remote host is affected by a vulnerability in its SMB stack that could allow an authenticated attacker to corrupt the memory of this host. This may result in execution of arbitrary code on this host, or an attacker may disable this host remotely. C Tenable Network Security, Inc...

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow source: https://www.securityfocus.com/bid/7506/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From'...

MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...

Watchguard firewall appliances security issues

Scope: WatchGuard Firewall Appliances. Vendor: WatchGuard Technologies, Inc http://www.watchguard.com . Affected: Vclass appliances running the current version of Vclass software. Legacy RSSA appliances running Vclass software. Legacy RSSA appliances that have not yet upgraded to Vclass software...

[security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN SSRT2362 WEBES Service Tools HP Tru64 UNIX, HP OpenVMS, Windows Potential File Access Vulnerability REVISION: 0 ------------------------------------------------------------ NOTICE: There are no restrictions for distribution of this...

KPMG-2002015: Microsoft Distributed Transaction Coordinator DoS

-------------------------------------------------------------------- Title: Microsoft Distributed Transaction Coordinator DoS BUG-ID: 2002015 Released: 19th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the way MSDTC handles malformed...

MS01-048: RPC Endpoint Mapper Malformed Request DoS (305399)

The hotfix for the 'RPC Endpoint Mapper Service on NT 4 has not been applied' problem has not been applied. Because the endpoint mapper runs within the RPC service itself, exploiting this vulnerability would cause the RPC service to fail, with the attendant loss of any RPC-based services the serv...