Lotus Core CMS 1.0.1 - Remote File Inclusion

phpbb3 Lotus Core CMS v1.0.1 Remote File Include Vulnerabilities Discovered by : Ciph3r MAIL : [email protected] SP TANX4 : Iranian hacker & Kurdish Security TEAM CLASS : remote download cms: http://sourceforge.net/project/showfiles.php?groupid=215112 C0de : include$phpbbrootpath...

IBM Lotus Domino Web Server HTTP Header Buffer Overflow (CVE-2008-2240)

IBM Lotus Domino is a server product that provides enterprise-grade e-mail, collaboration capabilities, and custom application platform. A stack buffer overflow vulnerability was reported in the IBM Lotus Domino Web Server application. The vulnerability is due to an error in the IBM Lotus Domino...

Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

applemail-dos.txt

Summary A maliciously crafted e-mail message can cause a denial of service in multiple versions of the Apple Mail email client. Scope Apple Mail version 3.1 914/915 Apple Mail version 3.2 919/919.2 Note: other versions of this product may be vulnerable as well; I have not tested them. The vendor...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

Stack overflow

Stack-based buffer overflow in the Community Services Multiplexer aka MUX or StMux.exe in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL...

CVE-2008-2499

Stack-based buffer overflow in the Community Services Multiplexer aka MUX or StMux.exe in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL...

DSquare Exploit Pack: D2SEC_SAMETIME

Name| d2secsametime ---|--- CVE| CVE-2008-2499 Exploit Pack| D2ExploitPack Description| IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability Notes|...

CVE-2008-2499

Stack-based buffer overflow in the Community Services Multiplexer aka MUX or StMux.exe in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL...

CVE-2008-2499

The CVE-2008-2499 issue is a stack-based buffer overflow in IBM Lotus Sametime’s Community Services Multiplexer (STMux.exe). The vulnerability arises from inadequate bounds-checking while parsing long URLs, allowing a remote attacker to cause arbitrary code execution. Affected products include IB...

KLA10203 ACE vulnerability in IBM Lotus Sametime

An unspecified vulnerability was found in IBM Lotus Sametime. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Related products IBM-Lotus-Sametime CVE list CVE-2008-2499 hi...

IBM Lotus Sametime buffer overflow

TCP/1533 oversized URL buffer overflow...

ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability

ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-028 May 21, 2008 -- Affected Vendors: IBM -- Affected Products: IBM Lotus Sametime -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers ha...

IBM Lotus Domino Web服务器Accept Language HTTP头栈溢出漏洞

BUGTRAQ ID: 29310 CVECAN ID: CVE-2008-2240 Lotus Domino是集电子邮件、文档数据库、快速应用开发技术以及Web技术为一体的电子邮件与群集平台。 Lotus Domino Web服务器中负责处理HTTP头的代码存在栈溢出漏洞，Accept Language字段是直接从请求的HTTP头中获得的，然后使用strcpy函数拷贝到了固定长度的栈缓冲区中，因此远程攻击者可以通过包含有GET方式的HTTP 1.1请求覆盖栈缓冲区，导致执行任意指令。 IBM Lotus Domino 8.0 IBM Lotus Domino 7.0 IBM Lotus...