CVE-2006-6291

Stack overflow in the IMAP module MEIMAPS.EXE in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service crash via a long argument containing asterisk and ?...

CVE-2006-6291

CVE-2006-6291 describes a stack overflow in MailEnable’s IMAP module (MEIMAPS.EXE) affecting MailEnable Professional 1.6–1.83 and 2.0–2.33, and MailEnable Enterprise 1.1–1.40 and 2.0–2.33. An authenticated remote user could crash the service by sending a long argument containing * and ? character...

MailEnable NetWebAdmin Unauthorized Access (ME-10019)

The remote version of MailEnable contains a web-based administration tool that allows a user to login with a blank password. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid23755; scriptversion"1.19";...

Secunia Research: MailEnable IMAP Service Two Vulnerabilities

====================================================================== Secunia Research 30/11/2006 - MailEnable IMAP Service Two Vulnerabilities - ====================================================================== Table of Contents Affected...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

DeluxeBB sig.php远程文件包含漏洞

DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB对用户请求的处理存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意指令。 DeluxeBB的templates/deluxe/cp/sig.php脚本没有对templatefolder参数做充分的检查过滤，允许攻击者通过恶意参数串包含远程服务器上的脚本代码执行。 DeluxeBB DeluxeBB 1.09 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： DeluxeBB hotfixfor109.zip...

Citrix Access Gateway LDAP authentication bypass

Overview An error with LDAP authentication in Citrix Access Gateway appliances may allow an attacker to successfully authenticate without providing correct login credentials. Description Citrix Access Gateway appliances use SSL VPN technology to give remote users secure access shared resources...

[SA22607] Hosting Controller Multiple Vulnerabilities

TITLE: Hosting Controller Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22607 VERIFY ADVISORY: http://secunia.com/advisories/22607/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Hosting Controller 6.x http://secunia.com/product/4754/...

Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass Advisory ID: cisco-sa-20061101-csamc http://www.cisco.com/warp/public/707/cisco-sa-20061101-csamc.shtml Revision 1.0 For Public Release 2006...

CVE-2006-5630

Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to 1 delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and 2 create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum...

CVE-2006-5629

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in 1 DisableForum.asp and 2 enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and...

CVE-2006-5629

Summary of CVE-2006-5629 (CVELIST/NVD) : The vulnerability affects Hosting Controller 6.1 before Hotfix 3.3. It arises from inadequate sanitization of the ForumID parameter in two ASP scripts, EnableForum.asp and DisableForum.asp, allowing an unauthenticated attacker to inject SQL via the ForumID...

CVE-2006-5630

Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to 1 delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and 2 create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum...

CVE-2006-5629

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in 1 DisableForum.asp and 2 enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and...

CVE-2006-5630

CVE-2006-5630 affects Hosting Controller 6.1 before Hotfix 3.3. The vulnerability enables remote deletion of a site’s virtual directory by tampering with the ForumID in DisableForum.asp, and creation of an arbitrary forum virtual directory via an empty ForumID in EnableForum.asp. Root cause: impr...

Hosting Controller <= 6.1 Hotfix 3.2 Remote Unauthenticated Vulns

Exploit for unknown platform in category web applications ================================================================= Hosting Controller = 6.1 Hotfix 3.2 Remote Unauthenticated Vulns ================================================================= Hosting Controller 6.1 Hotfix = 3.2 Multi...

Hosting Controller 6.1 Hotfix 3.2 - Access

Hosting Controller 6.1 Hotfix 3.2 - Access Hosting Controller 6.1 Hotfix = 3.2 Multi Vuln. SQLInjection, Command Injection ------- KAPDA::59 - Hosting Controller 6.1 Hotfix = 3.2 Vendor: Hosting Controller Vendor URL: www.hostingcontroller.com Solution: Hotfix 3.3 Found Date: 7/1/2006 Release Dat...

Hosting Controller 6.1 Hotfix 3.2 - Access

Hosting Controller 6.1 Hotfix = 3.2 Multi Vuln. SQLInjection, Command Injection ------- KAPDA::59 - Hosting Controller 6.1 Hotfix = 3.2 Vendor: Hosting Controller Vendor URL: www.hostingcontroller.com Solution: Hotfix 3.3 Found Date: 7/1/2006 Release Date: 10/10/2006 Discussion:...

Cisco Security Agent远程端口扫描拒绝服务漏洞

Cisco Security Agent CSA可以为服务器和桌面计算系统提供威胁防护。 CSA在处理端口扫描等特殊情况时存在漏洞，远程攻击者可能利用此漏洞导致服务响应能力下降。 如果以特定的选项对CSA for Linux运行端口扫描的话，就可能消耗过多的系统资源，导致拒绝服务。 Cisco CSA 5.0 for Linux Hotfix 5.0.0.1 Cisco CSA 4.5 for Linux Hotfix 4.5.1.6 Cisco CUCM = 5.04 Cisco CUPS = 1.02 临时解决方法：...