Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...

iPlanet Messaging Server - Messenger Express Expression() HTML Injection

iPlanet Messaging Server - Messenger Express Expression HTML Injection source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit...

iPlanet Messaging Server - Messenger Express Expression() HTML Injection

source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...

CVE-2006-5486

Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...

CVE-2006-5486

Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...

CVE-2006-5486

CVE-2006-5486: Cross-site scripting in Webmail of Sun Java System Messaging Server 6.0–6.2 and iPlanet Messaging Server 5.2. Remote attackers can trigger arbitrary Javascript via crafted e-mails. Affected: Webmail component of Sun/ iPlanet Messaging Server. Root cause described as XSS via crafted...

CVE-2006-3159

CVE-2006-3159 affects Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16. The flaw allows a local user to read portions of restricted files via a symlink attack on msg.conf in a directory defined by the CONFIGROOT environment variable, with the error message returning the first line of the target f...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure

Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messaging Server is a software product that provides a centralized location for...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messagi...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 Root Password Disclosure

Exploit for multiple platform in category local exploits ===================================================================== Sun iPlanet Messaging Server 5.2 HotFix 1.16 Root Password Disclosure ===================================================================== Date: 14 Jun 2006 Vendor: Sun...

CVE-2005-4045

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

CVE-2005-4045

Technical details about CVE-2005-4045 are not provided in the supplied documents. The NVD entry mentions an unspecified vulnerability in Sun Java System Messaging Server 2005Q1 enabling TLA password exposure, but vectors, affected versions, and fixes are not disclosed here.

CVE-2005-4045

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

CVE-2005-2022

Technical details about CVE-2005-2022 are not publicly available in the provided documents; no confirmed affected versions, root cause, impact, or remediation are disclosed beyond the brief description. Monitor for updates.

CVE-2005-2022

Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting XSS vulnerability...

Citadel/UX select() Bitmap Array Index Remote Oerflow

The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...

[SA13497] Sun Java Messaging Server Webmail Script Insertion Vulnerability

TITLE: Sun Java Messaging Server Webmail Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13497 VERIFY ADVISORY: http://secunia.com/advisories/13497/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Sun Java System Messaging Server 6.x...

[SA12937] Sun ONE Messaging Server Webmail Session Hijacking Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions properly. A remote attacker may cause a vulnerable server to crash,...