CVE-2004-1443

CVE-2004-1443 is a documented XSS vulnerability in the Horde-IMP inline MIME viewer affecting Horde-IMP versions 3.2.4 and earlier when accessed with Internet Explorer. The vulnerability allows an attacker to inject arbitrary script/HTML via a crafted e‑mail message. Public assessment sources con...

Citadel/UX select() Bitmap Array Index Remote Oerflow

The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...

LinPopUp: Buffer overflow in message reply

Background LinPopUp is a graphical application that acts as a frontend to Samba client messaging functions, allowing a Linux desktop to communicate with a Microsoft Windows computer that runs Winpopup. Description Stephen Dranger discovered that LinPopUp contains a buffer overflow in string.c,...

CVE-2004-1585

Flash Messaging 5.2.0g rev 1.1.2 and earlier allows remote attackers to cause a denial of service application crash via certain wide characters...

CVE-2004-2535

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key...

CVE-2004-1586

Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g rev 1.1.2, which could allow remote attackers to stay connected...

CVE-2004-2298

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

[SA13497] Sun Java Messaging Server Webmail Script Insertion Vulnerability

TITLE: Sun Java Messaging Server Webmail Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13497 VERIFY ADVISORY: http://secunia.com/advisories/13497/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Sun Java System Messaging Server 6.x...

[SA12937] Sun ONE Messaging Server Webmail Session Hijacking Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Buffer-overflow in ShixxNOTE 6.net

Luigi Auriemma Application: ShixxNote 6.net http://www.shixxnote.com Versions: 6.net, doesn't exist a specific version or build number but the latest change in Readme.txt something similar to a changelog is 117 Platforms: Windows Bug: buffer-overflow Exploitation: remote Date: 13 October 2004...

Flash Messaging DoS

Problem with handling some Unicode characters...

Server crash in Flash Messaging 5.2.0g

Luigi Auriemma Application: Flash Messaging http://www.flashmessage.com Versions: = 5.2.0g rev 1.1.2 Platforms: Windows Bugs: - server crash - unkickable clients Exploitation: remote, versus server Date: 07 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions...

Jera Technology Flash Messaging Server 5.2 - Remote Denial of Service

source: https://www.securityfocus.com/bid/11351/info Flash Messaging server is reported prone to a remote denial of service vulnerability. This issue arises due to the inability of the server to handle exceptional conditions properly. A remote attacker may cause a vulnerable server to crash,...

CVE-2002-1252

The CVE-2002-1252 entry concerns the Application Messaging Gateway for PeopleTools 8.1x (used in PeopleSoft products). Affected component/attack surface involves XML External Entities (XXE) fields in an HTTP POST processed by the SimpleFileHandler, allowing remote attackers to read arbitrary file...

CVE-2002-1252

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...

GLSA-200401-04 : GAIM 0.75 Remote overflows

The remote host is affected by the vulnerability described in GLSA-200401-04 GAIM 0.75 Remote overflows Yahoo changed the authentication methods to their IM servers, rendering GAIM useless. The GAIM team released a rushed release solving this issue, however, at the same time a code audit revealed...

CitadelUX - Remote Buffer Overflow

CitadelUX - Remote Buffer Overflow / Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com home.ro lamerz erased my [email protected] address for hosting exploits there.. Citadel/UX is a very well known client/server messaging for BBS which runs on port 504 by default. It has been discover...

Gaim: New vulnerabilities

Background Gaim is a multi-protocol instant messaging client for Linux which supports many instant messaging protocols. Description Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname...

Gadu-Gadu 6.0 - File Download Filename Obfuscation

Gadu-Gadu 6.0 - File Download Filename Obfuscation source: https://www.securityfocus.com/bid/11017/info Gadu-Gadu is a Polish instant messaging application for Microsoft Windows operating systems. It is reported that the Gadu-Gadu instant messenger application contains a weakness allowing attacke...