CVE-2004-0396: Undefined Security Weakness

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines...

Microsoft Exchange Server 2003 fails to assign user credentials to proper mailbox

Overview A flaw in the authentication mechanism that Microsoft Exchange Server 2003 uses for Outlook Web Access users in some configurations could expose another user's mailbox. Description Outlook Web Access OWA is a feature of Microsoft Exchange Server 2003. By using OWA, a server that is runni...

CVE-2003-1028: Undefined Security Weakness

The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid1000...

WebArtFactory CMS Vulnerability

Quick Summary: Product : WebArtFactory CMS. Version : Several in-production old system versions. Vendor : WebArtFactory - http://www.webartfactory.com Class : Remote Criticality : High Operating Systems : N/A. Synopsis From the WebArtFactory webpage: "Somos una empresa de desarrollo de pginas web...

PLD Software Ebola 0.1.4 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/9156/info It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf to construct an error message when authentication is not...

Avaya Argent Office uses weak authentication for TFTP-based administrative control

Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...

CVE-2003-0734

Unknown vulnerability in the pamfilter mechanism in pamldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system...

CVE-2003-0734

Removed by vendor...

CVE-2003-0288: Undefined Security Weakness

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

Race in XP SCM Service Shutdown Mechanism

Race Condition in Windows XP Service Control Manager Service Shutdown Mechanism ABSTRACT "The Windows XP Professional operating system is the best choice for businesses of all sizes. Windows XP Professional integrates the strengths of Windows 2000 Professional, such as standards-based security,...

CVE-2002-0831

The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service kernel panic via a pipe call in which one end is terminated and an EVFILTWRITE filter is registered for the other end...

CVE-2002-0831

Technical details about CVE-2002-0831 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0147: Undefined Security Weakness

Buffer overflow in the ASP data transfer mechanism in Internet Information Server IIS 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."...

CVE-2002-0030: Undefined Security Weakness

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe...

CVE-2002-1265

The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service hang...

Important: Red Hat Security Advisory: kernel security update

This kernel update for Red Hat Linux Advanced Server 2.1 addresses some security issues and provides minor bug fixes. The Linux kernel handles the basic functions of the operating system. A number of vulnerabilities were found in the Red Hat Linux Advanced Server kernel. These vulnerabilities cou...

[SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Webserver 4D v3.6 Weak Password Preservation Vulnerability -- - -- Type Design Error - -- Release Date September 25, 2002 - -- Product / Vendor Webserver 4D by MDG Computer Services, Inc. is an complete Web Server environment written entirely on t...

poprelayd & sendmail Arbitrary Mail Relay

Nessus has detected that the remote SMTP server allows relaying for users which were identified by 'POP before SMTP'. The access control mechanism is based on the POP server logs. However, it is possible to poison these logs, which means that any spammer could be using your mail server to send...

Security Advisory FreeBSD-SA-02:37.kqueue

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:37.kqueue Security Advisory The FreeBSD Project Topic: local users can panic the system using the kqueue mechanism Category: core Module: kqueue Announced: 2002-08-05...

Sharity Cifslogin Buffer Overflow (arguments)

Sharity Cifslogin Buffer Overflow arguments ============================================= Author: Alex Hernandez [email protected] C 2002 Thanks all the people from Spain and Argentina. Greets to: Paco Spain, Gabriel M, L.martins. Thanks friends for all ur help Zillion & Kevin from Snosoft...