646 matches found
Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection
Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection source: https://www.securityfocus.com/bid/10879/info A vulnerability has been reported to exist in Microsoft Internet Explorer that may allow remote attackers to pass arbitrary command line arguments to an...
CVE-2002-0697
Microsoft Metadirectory Services (MMS) 2.2 is affected by a vulnerability where remote attackers can bypass authentication by connecting an LDAP client directly to MMS and bypassing MMS credential checks, potentially allowing modification of sensitive data. The affected component is MMS 2.2; the ...
CVE-2002-0697: Undefined Security Weakness
Microsoft Metadirectory Services MMS 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials...
CVE-2000-1209: Undefined Security Weakness
The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...
CVE-2000-0772
The CVE-2000-0772 entry concerns Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) that creates a default account named “sa” with no password, enabling unauthenticated access. The NVD entry attributes a CVSSv2 base score of 7.5 (HIGH) with network attac...
CVE-2000-0772: Undefined Security Weakness
The installation of Tumbleweed Messaging Management System MMS 4.6 and earlier formerly Worldtalk Worldsecure creates a default account "sa" with no password...