Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

Design/Logic Flaw

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a...

CVE-2008-5424

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a...

CVE-2008-5424

Technical details for CVE-2008-5424 are not publicly available in the provided documents. Monitor for updates.

CVE-2008-5424

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a...

[security bulletin] HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service (DoS) or Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01599836 Version: 1 HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service DoS or Arbitrary Code Execution...

IBM TSM Client Remote Heap BOF Vulnerability

This host is installed with IBM TSM Client and is prone to heap based buffer overflow vulnerability. Vulnerability exists due to an input validation error in TSM Backup-Archive client, which affects the Client Acceptor Daemon CAD and the Backup-Archive client scheduler and scheduler service when...

ZDI-08-071: IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability

ZDI-08-071: IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-071 October 30, 2008 -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager Express -- TippingPointTM IPS Customer Protection:...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2008-4005

Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2008-4005

CVE-2008-4005 affects Oracle Database 11.1.0.6 via the Oracle Application Express component. The Nessus/OSS content confirms an unspecified vulnerability allowing remote authenticated users to affect confidentiality, integrity, and availability through unknown vectors. A patch is noted: Oracle Ap...

calexpress2-sql.txt

----------------------------------------------------------------------------- Calendar Express version 2.0 week.php - SQL Injection Vulnerability http://www.phplite.com ---------------------------------------------------------- Bug founded by d3v1l Date: 08.10.2008 [email protected]...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Unfixed XSS vulnerability at www.halloweenexpress.com

Security researcher AppleJax, has submitted on 24/09/2008 a cross-site-scripting XSS vulnerability affecting www.halloweenexpress.com, which at the time of submission ranked 16551 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It i...

DoS vulnerability in Outlook Express

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в Microsoft Outlook Express. DoS: Нужно выслать html-письмо на емайл пользователя Outlook Express, которое содержит в теле следующий код. styleposition:relative/style tableDoS/table При просмотре этого письма почтовый...

CVE-2008-2929

The CVE-2008-2929 event concerns multiple XSS vulnerabilities in the adminutil library used by the Directory Server Administration Express and Directory Server Gateway web interfaces. Affected systems include Red Hat Directory Server 7.1 prior to SP7, 8 EL4/EL5, and Fedora Directory Server. The X...

Red Hat Directory Server多个跨站脚本漏洞

BUGTRAQ ID: 30870 CVE ID: CVE-2008-2929 CNCVE ID：CNCVE-20082929 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Directory Server Administration Express和Directory Server Gateway DSGWWEB接口不正确处理用户提供的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于WEB接口不正确解析用户提供的"%"转义字符，可利用这个问题触发跨站脚本攻击，可获得管理员等用户敏感信息。 RedHat Fedora...