MS06-008: Vulnerability in Web Client Service Could Allow Remote Code Execution (911927)

The remote version of Windows contains a flaw in the Web Client service that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need credentials to log into the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Web Client Service vulnerable to buffer overflow

Overview A buffer overflow in the message handling routines of the Microsoft Web Client Service may allow a remote, authenticated attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft, the Web Client Service:allows applications to access documents on the...

CVE-2005-4323

Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated...

CVE-2005-4323

CVE-2005-4323 describes an unspecified vulnerability in Hitachi Cosminexus Collaboration Portal (versions 06-00 through 06-10-/B), Groupmax Collaboration Portal (07-00 through 07-10-/B), and Groupmax Collaboration Web Client (07-00 through 07-10-/A) that allows remote attackers to cause a denial ...

CVE-2005-2994

Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets XSS...

CVE-2005-2994

The CVE-2005-2994 entry concerns the IBM Rational ClearQuest web client (versions 2002.05.00/2002.05.20 and 2003.06.00–2003.06.15 before SR5). The vulnerability is described as an unspecified issue that allows remote attackers to execute XML Stylesheets (XSS) via the web client. The connected doc...

CVE-2005-2994

Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets XSS...

MS05-038: Cumulative Security Update for Internet Explorer (896727)

The remote host contains a version of the Internet Explorer that is vulnerable to multiple security flaws JPEG Rendering, Web Folder, COM Object that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web pag...

CVE-2002-2104

The CVE-2002-2104 entry concerns graph.php in Ganglia PHP RRD Web Client 1.0.2, where the command parameter is passed to passthru, enabling remote command execution. Affected software is Ganglia PHP RRD Web Client 1.0.2; the underlying issue is unsafely handling the command parameter in passthru,...

ICMP-based blind connection-reset attack

Folks, Here's the packet trace and the explanation of an ICMP-based blind connection-reset attack. In our sample scenario, a web-client 10.0.0.1, TCP port 3270 is downloading a file from a web-server 192.168.0.1, TCP port 80. If the TCP/IP implementations of both end-points are vulnerable,you can...

MS05-037: Vulnerability in JView Profiler Could Allow Code Execution (903235)

The remote host contains a version of the JView Profiler module that is vulnerable to a security flaw that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc...

MS05-036: Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214)

The remote host contains a version of the Color Management Module that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...

CVE-2005-1207

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

CVE-2005-1207

CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...

Microsoft Windows Web Client service (WebDav client) buffer overflow

Buffer overflow on client request parsing...

Microsoft Security Bulletin MS05-028 Vulnerability in Web Client Service Could Allow Remote Code Execution (896426)

Microsoft Security Bulletin MS05-028 Vulnerability in Web Client Service Could Allow Remote Code Execution 896426 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

MS05-025: Cumulative Security Update for Internet Explorer (883939)

The remote host is missing IE Cumulative Security Update 883939. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18490;...

BitTorrent Web Client Detection

Binary data 2872.prm...

logicsBS2000.txt

Logics Software Filetransfer from BS2000 Host to Web Client Release Date: April 4, 2005 Date noticed: March 11, 2005 Severity: High verified read access to any file and to-be-verified write access Vendor: Logics Sofware http://www.logics.de http://www.logics.de/bs2000.htm Systems Affected: All...

CVE-2004-0533

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client...