NuPoint Messenger server transmits authentication credentials in plain text

Overview NuPoint Messenger is a unified communications product that connects to a Microsoft Exchange server. When communicating with the mail server, the NuPoint Messenger server transmits Exchange usernames and passwords in cleartext. Description The NuPoint Messenger server can connect to a...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and this port. It can be used to share files and chat with other users. SPDX-FileCopyrightText: 2009 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2007-5543

Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

Stack overflow

Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

Stack overflow

Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

CVE-2007-5542

Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

CVE-2007-5543

CVE-2007-5543 describes a stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 triggered by a crafted Yahoo! Messenger packet, enabling remote code execution. The root cause is improper bounds checking in the packet handling path of the Yahoo Messenger-related code. Affected software: Mirand...

CVE-2007-5542

The CVE-2007-5542 entry concerns Miranda IM. A stack-based buffer overflow in Miranda IM 0.6.8 (and related notes to 0.7.0) allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. The vulnerability’s impact is remote code execution with the potential for full comp...

CVE-2007-5542

Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

CVE-2007-5543

Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590...

Sun Java System Messenger Express 6.3-0.15 - error Cross-Site Scripting

Sun Java System Messenger Express 6.3-0.15 - error Cross-Site Scripting source: https://www.securityfocus.com/bid/34140/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

Sun Java System Messenger Express 6.3-0.15 - 'error' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34140/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sun Java System Messenger Express XSS

Product:Sun Javatm System Messenger Express Version: 6.3-0.15 Author:syniack contact:[email protected] Vulnerable link: http://example.com/?user=admin&error="alert1; -- SyN/AcK RuLzZ...

Microsoft MSN Live Messneger Denial of Service Vulnerability

This host is running Microsoft MSN Live Messenger and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodmslivemsngrcharsetdosvuln.nasl 8193 2017-12-20 10:46:55Z cfischer $ Microsoft MSN Live Messneger Denial of Service Vulnerability Authors: Sujit Ghosal Copyright...

Microsoft MSN Live Messneger Denial of Service Vulnerability

Microsoft MSN Live Messenger is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Windows Live Messenger字符集数据远程拒绝服务漏洞

BUGTRAQ ID: 33825 CVECAN ID: CVE-2009-0647 Windows Live Messenger是非常流行的即时通讯聊天工具。 Windows Live Messenger处理消息时存在拒绝服务漏洞，如果远程攻击者在向MSN联系人发送消息的Content-Type头中修改了字符集字段的UTF-8.0值的话，就会导致对方的MSN崩溃。 Microsoft Windows Live Messenger 2009 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Format string

msnmsgr.exe in Windows Live Messenger WLM 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service application crash via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header...

CVE-2009-0647

msnmsgr.exe in Windows Live Messenger WLM 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service application crash via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header...

CVE-2009-0647

CVE-2009-0647 affects Microsoft Windows Live Messenger 2009 (build 14.0.8064.206 and related 14.0.8064.x). The vulnerability arises when a remote attacker sends a message where the Content-Type header’s charset field contains a modified or UTF-8.0 value, which can cause the target’s msnmsgr.exe t...

CVE-2009-0647

msnmsgr.exe in Windows Live Messenger WLM 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service application crash via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header...