173 matches found
CVE-2002-1487
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash by sending the raw messages 1 206, 2 211, 3 213, 4 214, 5 215, 6 217, 7 218, 8 243, 9 302, 10 317, 11 324, 12 332, 13 333, 14 352, and 15 367...
vchat
Product : vchat Version : First WebSite : unknown Problem : View messages Easy DoS Description: ------------ View messages: ============== File with all chat sessions are in txt file msg.txt and everybody can read it Easy DoS: ========= If the size msg.txt will be more than 326 kb a window of a...
Critical: Red Hat Security Advisory: : Updated sendmail packages fix critical security issues
Updated Sendmail packages are available to fix a vulnerability that may allow remote attackers to gain root privileges by sending a carefully crafted message. These packages also fix a security bug if sendmail is configured to use smrsh. Sendmail is a widely used Mail Transport Agent MTA which is...
CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service CPU consumption via a message with an extremely large or negative value for the year, which causes a tight loop...
BlueFace Falcon Web Server 2.0 - Error Message Cross-Site Scripting
BlueFace Falcon Web Server 2.0 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/5435/info Falcon Webserver does not sufficiently sanitize HTML tags from error message output. In particular, attackers may inject HTML into 301 and 404 error pages. It is possible to...
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (4)
// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...
php-nuke.5.5.css.txt
PHP-Nuke is a PHP based portal management system used at thousands of sites. A Cross Site Scripting vulnerability has been discovered in the PHP-Nuke version 5.5 and prior versions. There is a function called Private Messages in PHP-Nuke by which the registered users of the site can send messages...
REVISION: @stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please note revision section below @stake Inc. www.atstake.com Security Advisory Advisory Name: NetDDE Message Vulnerability Release Date: 02/05/2001 Updated on 2/08/2001 Application: Network DDE system component Platform: Windows 2000 up to and...
@stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)
@stake Inc. www.atstake.com Security Advisory Notification Advisory Name: NetDDE Message Vulnerability Release Date: 02/05/2001 Application: Network DDE system component Platform: Windows 2000 up to and including Service Pack 1 Severity: Any local user can obtain SYSTEM privileges Author: DilDog...
CVE-2000-1104
Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 CVE-2000-0746 allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those...
CVE-2000-0601
CVE-2000-0601 affects LeafChat 1.7 IRC client. A remote IRC server can cause a denial of service by rapidly sending a large amount of error messages. No exploitation details or fixes are provided in the supplied documents.