CVE-2006-5364

Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote authenticated attack vectors, aka Vuln OC4J05...

CVE-2006-5356

Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln OC4J02...

CVE-2006-5353

Technical details (affected product/version, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2006-5347

CVE-2006-5347 affects Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2. The vulnerability is described as unspecified with unknown impact and remote attack vectors related to HTTPS/SSL (aka Vuln# OHS04); no remediation details are provided in the connected documents.

CVE-2006-5348

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln OHS05...

CVE-2006-5366

Technical details (affected components, root cause, specific impact or fixes) are not provided in the connected documents. Monitor for official advisories or vendor advisories for CVE-2006-5366 updates.

CVE-2006-5348

Technical details for CVE-2006-5348 are not publicly provided in the supplied documents. Available records reference the vulnerability but do not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2006-5355

Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln SSO01...

CVE-2006-5364

Technical details for CVE-2006-5364 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2006-5347

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln OHS04...

CVE-2006-5355

Technical details for CVE-2006-5355 are not publicly available in the provided documents; monitor for updates.

CVE-2006-4379

Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character...

CVE-2006-4379

CVE-2006-4379 affects Ipswitch IMail Server (and related Ipswitch products) where the SMTP daemon is vulnerable to a stack-based buffer overflow via a long RCPT TO argument (between @ and :) that allows remote code execution. Public material across advisories and exploit references notes the issu...

CVE-2006-4379

Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character...

Ipswitch Collaboration Suite SMTP Server Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ipswitch Collaboration Suite and IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP daemon. A lack of bounds checking during the parsing o...

CVE-2006-3574

Multiple cross-site scripting XSS vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors aka HS06-014-01...

CVE-2006-3574

CVE-2006-3574 involves XSS vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client (affected before 07-20-/D) and uCosminexus Collaboration Portal and Forum/File Sharing (affected before 06-20-/C). The issue allows remote execution of malicious scripts via unknown vectors. The pro...

CVE-2006-3552

Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium are affected. Using a specific .dat file in the StarEngine /data directory up to 20060630 or earlier prevents proper reception and implementation of bullet signature updates, enabling context-dependent attackers to misuse the ...

CVE-2006-3552

Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, does not properly receive and implement bullet signature updates, which allows context-dependent attackers to use...

ERNW-02-2006.txt

ERNW Security Advisory 02-2006 Buffer Overflow in SIP Foundry's SipXtapi Author: Michael Thumann Homepage: www.ernw.de 1. Summary: The sipXtapi library from sip foundry contains a buffer overflow when parsing the CSeq field. This flaw can be used by an attacker to gain control over EIP and execut...