5530 matches found
CVE-2008-0863
BEA WebLogic Server and WebLogic Express 9.0/9.1 expose the web service WSDL and security policies, allowing remote retrieval of sensitive information and the potential to launch further attacks. Affected component: WebLogic web services configuration; root cause: exposed WSDL/security policy end...
AIX 520009 : U811313
The remote host is missing AIX PTF U811313 which is related to the security of the package devices.pciex.14104003.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
IBM Tivoli Storage Manager Express Backup Server buffer overflow
TSM Express Backup Server TCP/1500 buffer overflow...
IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express. Authentication is not required to exploit this vulnerability. The specific flaw resides in the TSM Express Backup Server service, dsmsvc.exe, which listens by default o...
Heap overflow
Heap-based buffer overflow in the Express Backup Server service dsmsvc.exe in IBM Tivoli Storage Manager TSM Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value...
CVE-2008-0247
Heap-based buffer overflow in the Express Backup Server service dsmsvc.exe in IBM Tivoli Storage Manager TSM Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value...
CVE-2008-0247
Summary: IBM Tivoli Storage Manager Express 5.3’s Backup Server component (dsmsvc.exe) is affected by a heap-based buffer overflow when handling a length field in a network packet. This vulnerability can be triggered by an unauthenticated remote attacker sending a crafted packet to the Express Ba...
Microsoft Outlook Express MHTML URL解析信息泄露漏洞（MS07-034）
BUGTRAQ ID: 24392 CVECAN ID: CVE-2007-2225 Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。 Windows的MHTML协议处理器在返回MHTML内容时没有正确的解释HTTP头，这可能允许Internet Explorer绕过域限制。 攻击者可以通过构建特制的网页来利用该漏洞。如果用户使用Internet Explorer查看网页，该漏洞可能允许信息泄露。成功利用此漏洞的攻击者可以读取另一个Internet Explorer域中的数据。 Microsoft Outlook Express 6.0...
Microsoft Outlook Express内容处置解析跨域信息泄露漏洞（MS07-034）
BUGTRAQ ID: 24410 CVECAN ID: CVE-2007-2227 Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。 MHTML协议处理程序将内容处置通知传递回Internet Explorer的方式中存在一个信息泄露漏洞，可能允许攻击者绕过Internet Explorer中的文件下载对话框。 攻击者可以通过构建特制的网页来利用该漏洞。如果用户使用Internet Explorer查看了该网页，漏洞就可能允许信息泄露。成功利用此漏洞的攻击者可以读取另一个Internet Explorer域中的数据。 Microsof...
Default credentials
IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when 1 attempted duplication of a username occurs when creating an account or 2 when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames...
CVE-2007-6408
IBM Tivoli Provisioning Manager Express is affected by a vulnerability where error messages disclose information during username duplication or login with a valid username, enabling remote attackers to enumerate usernames. The connected documents do not provide concrete exploit details or a remed...
Airkiosk/formlib application is XSS vuln
In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...
IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit
No description provided by source. !/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com...
CVE-2003-1438
Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user...
CVE-2003-1378
Technical details for CVE-2003-1378 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins for affected products and fixes.
Microsoft Outlook Express和Windows Mail NNTP协议回应数据堆溢出漏洞（MS07-056）
BUGTRAQ ID: 25908 CVECAN ID: CVE-2007-3897 Outlook Express和Windows Mail都是Windows操作系统所捆绑的邮件和新闻组客户端。NNTP（网络新闻传输协议）是用于读取和张贴Usenet文章的协议。 Windows Mail和Outlook Express在处理NNTP回复时存在堆溢出漏洞，恶意NNTP服务器可能利用此漏洞控制用户系统。 如果服务器返回了多于客户端所请求的数据，就可能将攻击者可控的值储存到所分配的内存范围之外，覆盖控制结构，导致执行任意指令。 Microsoft Outlook Express 6.0 SP...
iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow
Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Security Advisory 10.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2007 I. BACKGROUND Microsoft Windows Mail and Outlook Express are the default mail and news clients for Windows operating...
Microsoft Outlook Express / Windows Mail NNTP buffer overflow
Heap memory overflow on NNTP server reply parsing...
Microsoft Security Bulletin MS07-056 - Critical Security Update for Outlook Express and Windows Mail (941202)
Microsoft Security Bulletin MS07-056 - Critical Security Update for Outlook Express and Windows Mail 941202 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves one privately reported vulnerability. The vulnerability could allow remo...