CVE-2005-0289

Apple AirPort Express (pre-6.1.1) and Extreme (pre-5.5.1) devices configured as Wireless Data Service (WDS) are susceptible to a denial-of-service when a remote actor connects to UDP port 161 and before a link-state change occurs. The CVE-2005-0289 entry notes the issue as a device freeze and ide...

CVE-2005-0289

Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service WDS, allows remote attackers to cause a denial of service device freeze by connecting to UDP port 161 and before link-state change occurs...

CVE-2005-0289: Undefined Security Weakness

Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service WDS, allows remote attackers to cause a denial of service device freeze by connecting to UDP port 161 and before link-state change occurs...

CVE-2005-0186

CVE-2005-0186 affects Cisco IOS releases 12.1YD, 12.2T, 12.3 and 12.3T when ITS/CME/SRST are active. A malformed SCCP control message can trigger a device reboot (DoS). Answer: vulnerable component is IOS Telephony Service/CME/SRST handling of SCCP; root cause is malformed control protocol messag...

uofpConfig.txt

University of Phoenix Outlook Express Unauthorized Configuration Manipulation Vendor Homepage: http://www.phoenix.edu Discovered by: Adam Baldwin [email protected] www.evilpacket.net\advisories\EP-000-0002.html Discovery Date: 1.17.2005 File Name: PhxStudent15.ocx Vulnerable Version:...

Cisco IOS Telephony Services DoS

DoS on SCCP control protocol parsing if configured tobe used with Cisco IOS Telephony Service ITS, Cisco CallManager Express CME or Survivable Remote Site Telephony SRST...

CVE-2004-2210

Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...

CVE-2004-2694

Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "top"...

CVE-2004-2320

The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are...

CVE-2004-2137

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information...

CVE-2004-2320: Exposure of Sensitive Information to an Unauthorized Actor

The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are...

Gadu-Gadu Remote DoS (all versions)

Product: Gadu-Gadu, all available versions including the latest 6.1 build156 Vendor: SMS-EXPRESS.COM http://www.gadu-gadu.pl Impact: Remote Denial of Service Severity: Important Author: Maciej Soltysiak [email protected] Advisory: http://www.soltysiak.com/gg-dos.txt ISSUE It is possible to...

Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass

Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using ...

Microsoft Outlook Express 4.x/5.x/6.0 - Plaintext Email Security Policy Bypass

source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using a specially crafted CID URI. This will result in a policy bypass because the...

[SA12839] Express-Web Content Management System Unspecified Cross-Site Scripting

TITLE: Express-Web Content Management System Unspecified Cross-Site Scripting SECUNIA ADVISORY ID: SA12839 VERIFY ADVISORY: http://secunia.com/advisories/12839/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Express-Web Content Management System...

CVE-2002-1169

The CVE-2002-1169 entry affects IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x prior to 4.0.1.26. The underlying issue is a malformed HTTP request to helpout.exe that omits the HTTP version number, causing ibmproxy.exe to crash and resulting in a denial of service. Connected sources (Op...

CVE-2002-1179

Buffer overflow in the S/MIME Parsing capability of Microsoft Outlook Express 5.5 and 6.0 is triggered when a user views or previews a digitally signed email with a long From address, allowing potential remote code execution. The root cause is an overflow in the S/MIME parsing path, leading to ar...

CVE-2002-1179

Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message...

CVE-2002-1169: Undefined Security Weakness

IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service crash via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash...

CVE-2002-1179: Undefined Security Weakness

Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message...