[SA12376] Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness

TITLE: Microsoft Outlook Express "BCC:" Recipient Disclosure Weakness SECUNIA ADVISORY ID: SA12376 VERIFY ADVISORY: http://secunia.com/advisories/12376/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Outlook Express 6...

Microsoft Outlook Express information leak

Bcc: header may not be stripped for partial multipart MIME message...

Microsoft Outlook and Outlook Express Arbitrary Program Execution Vulnerability

Binary data 1290.prm...

Microsoft Outlook Express S/MIME Buffer Overflow Vulnerability

Binary data 1291.prm...

Microsoft Outlook Express for MacOS HTML Attachment Automatic Download Vulnerability

Binary data 1293.prm...

Microsoft Outlook Express Mail Client Detection

Binary data 1332.prm...

Microsoft Outlook Express POP Denial of Service Vulnerability

Binary data 1292.prm...

Outlook Express .wab File Processing Overflow

Binary data 3510.prm...

Outlook Express BCC: Recipient Disclosure

Binary data 2150.prm...

CVE-2004-0215

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service application crash via a malformed e-mail header...

CVE-2004-0713

The CVE-2004-0713 case affects BEA WebLogic Server and WebLogic Express, versions 8.1–SP2, 7.0–SP4, and 6.1–SP6. The vulnerability is in the remove method of a stateful Enterprise JavaBean (EJB), where EJB permissions are not properly checked before unexporting a bean. This allows remote authenti...

CVE-2004-0715

The CVE-2004-0715 affects BEA WebLogic Server/WebLogic Express, specifically the WebLogic Authentication provider for versions 8.1 through SP2 and 7.0 through SP4. The root cause is improper clearing of group member relationships when a group is deleted, which can allow a new group bearing the sa...

CVE-2004-0715: Undefined Security Weakness

The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group membe...

CVE-2004-0215

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service application crash via a malformed e-mail header...

CVE-2004-0215

CVE-2004-0215 describes a denial-of-service vulnerability in Microsoft Outlook Express 5.5 SP2 and Outlook Express 6 (including SP1 and 64‑bit/Windows Server 2003 variants) where a specially crafted or malformed e-mail header could crash the application. The issue is documented in MS04-018 (CAN-2...

Microsoft Outlook Express DoS

Invalid mail headers processing...

CVE-2004-0215: Undefined Security Weakness

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service application crash via a malformed e-mail header...

Microsoft Security Bulletin MS04-018

Microsoft Security Bulletin MS04-018 Cumulative Security Update for Outlook Express 823353 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Outlook Express® Impact of Vulnerability: Denial of Service Maximum Severity Rating: Moderate...

Microsoft Outlook Express fails to properly validate malformed e-mail headers

Overview A vulnerability exists in some versions of Microsoft Outlook Express that could allow a remote attacker to cause a denial of service. Description According to Microsoft Security Bulletin MS04-018, a flaw exists in the way that some versions of Microsoft's Outlook Express mail client...

CVE-2004-0652

CVE-2004-0652 affects BEA WebLogic Server and WebLogic Express (versions 7.0 with SP4, and 8.1 with SP2). The vulnerability arises from accessible internal methods that allow an attacker to obtain the boot credentials (username and password) needed to start the server. Impact is credential leakag...