2721 matches found
Microsoft Windows Web Client Buffer Overflow Vulnerability
Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...
CVE-2006-0503
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...
CVE-2006-0503
Summary of CVE-2006-0503 : The IMAP server in MailEnable Professional Edition prior to 1.72 is vulnerable to a remote denial of service via certain EXAMINE commands. Exploitation results in a service crash, affecting the MailEnable IMAP service. Remediation: upgrade to MailEnable Professional Edi...
CVE-2006-0503
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...
[SA18668] MailEnable Professional EXAMINE Command Denial of Service
TITLE: MailEnable Professional EXAMINE Command Denial of Service SECUNIA ADVISORY ID: SA18668 VERIFY ADVISORY: http://secunia.com/advisories/18668/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: MailEnable Professional 1.x http://secunia.com/product/3474/ DESCRIPTION: A...
CVE-2006-0073
CVE-2006-0073 is an XSS vulnerability reported for DiscusWare Discus Freeware 3.10.5 and Discus Freeware Professional 3.10.4. The issue arises because the application does not properly sanitize unsanitized data in the URL before including it in an error message, enabling remote attackers to injec...
[SA18283] Discus Error Message Cross-Site Scripting Vulnerability
TITLE: Discus Error Message Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18283 VERIFY ADVISORY: http://secunia.com/advisories/18283/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Discus Freeware 3.x http://secunia.com/product/6725/ Discus...
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/16119/info DiscusWare Discus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...
CVE-2005-4456
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...
CVE-2005-4456
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...
CVE-2005-4456
CVE-2005-4456 describes multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 prior to patch ME-10009, enabling remote attackers to crash the service and possibly execute arbitrary code via long LIST, LSUB, and UID FETCH commands. The description notes these may be alternat...
CVE-2005-4402
Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command...
CVE-2005-4402
CVE-2005-4402 describes a buffer overflow in MailEnable Professional (1.71 and earlier) and MailEnable Enterprise (1.1 and earlier). The root cause is a buffer overflow triggered by a long IMAP EXAMINE command, allowing remote authenticated users to potentially execute arbitrary code. The availab...
CVE-2005-4360
The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...
CVE-2005-4360
The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...
[Full-disclosure] [ACSSEC-2005-11-27-0x2] Remote Overflows in Mailenable Enterprise 1.1 / Professional 1.7
Re: See-Security Research and Development "A remote buffer overflow exists in MailEnable Enterprise 1.1 IMAP EXAMINE command, which allows for post authentication code execution. This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch." -- There's a reason why the...
CVE-2005-4177
The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...
Magic Book Professional 2.0 - 'Book.cfm' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15805/info Magic Book Professional is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...