MailEnable Standard SMTP mailto: Request Format String

The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...

CVE-2004-1762

Unknown vulnerability in F-Secure Anti-Virus FSAV 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV...

Ipswitch IMail < 8.15 Hotfix 1 IMAP EXAMINE Argument Buffer Overflow

Binary data 2695.prm...

OFF2000: Office Programs Can Browse Restricted Drives (302753)

The remote host is running a version of Microsoft Office that contains a security flaw that could allow a user to browse restricted drives. An attacker could exploit this flaw to gain access to files he would otherwise not have access to. C Tenable Network Security, Inc. include"compat.inc"; if...

MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302) (uncredentialed check)

The remote version of Windows contains a flaw that may allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc"; i...

MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302)

The remote version of Windows contains a flaw that could allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc";...

MS05-008: Vulnerability in Windows Shell (890047)

The remote version of Windows contains a flaw in the Windows Shell that could allow an attacker to elevate his privileges and/or execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to lure a victim into visiting a malicious website or opening a malicious file...

CVE-2004-1762

Unknown vulnerability in F-Secure Anti-Virus FSAV 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV...

MS04-006: WINS Server Remote Overflow (830352) (uncredentialed check)

The remote Windows Internet Naming Service WINS is affected by a vulnerability that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet with improperly advertised lengths. C Tenable Network Security, Inc...

MailEnable IMAP Server Multiple Remote Buffer Overflows

The target is running at least one instance of MailEnable's IMAP service. Two flaws exist in MailEnable Professional Edition 1.52 and earlier as well as MailEnable Enterprise Edition 1.01 and earlier - a stack-based buffer overflow and an object pointer overwrite. A remote attacker can use either...

The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities

Overview The ActiveX and HTML file browsers in the Symantec Clientless VPN Gateway 4400 Series contain various unspecified vulnerabilities. Description The Symantec Clientless VPN Gateway 4400 Series is a stand-alone security appliance for connecting remote users to a trusted network via a virtua...

MS04-033: Microsoft Excel Code Execution (886836)

The remote host has a version of Microsoft Excel that is vulnerable to a code execution issue. An attacker could exploit this flaw to execute arbitrary code on the remote host with the privileges of the user opening the file. To exploit this flaw, an attacker would need to send a malformed Excel...

Debian DSA-055-1 : zope - remote unauthorized access

A new Zope hotfix has been released which fixes a problem in ZClasses. The README for the 2001-05-01 hotfix describes the problem as any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for...

Debian DSA-043-1 : zope

This advisory covers several vulnerabilities in Zope that have been addressed.Hotfix 08092000 'Zope security alert and hotfix product' The issue involves the fact that the getRoles method of user objects contained in the default UserFolder implementation returns a mutable Python type. Because the...

MS04-014: Microsoft Hotfix (credentialed check) (837001)

The remote host has a bug in its Microsoft Jet Database Engine 837001. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. To exploit this flaw, an attacker would need the ability to craft a specially malformed database query and have this engine execute i...

MS04-011: Microsoft Hotfix (credentialed check) (835732)

The remote host is missing a critical Microsoft Windows Security Update 835732. This update fixes various flaws that could allow an attacker to execute arbitrary code on the remote host. A series of worms Sasser are known to exploit this vulnerability in the wild. C Tenable Network Security, Inc...

MS04-012: Microsoft Hotfix (credentialed check) (828741)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12206; scriptversion"1.45"; scriptcvsdate"Date:...

F-Secure Anti-Virus for Linux fails to properly detect Sober.D virus

Overview F-Secure Anti-Virus for Linux contains a flaw that may prevent it from properly detecting the Sober.D virus. A hotfix for this vulnerability has been released. Description F-Secure Anti-Virus version 4.52 for Linux contains a flaw that may prevent it from properly detecting the Sober.D...

MS04-001: Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A buffer overflow vulnerability in the H.323 filter of the Microsoft ISA Server 2000 allows an attacker to execute arbitrary code on the remote host. An attacker can exploit this vulnerability by sending a specially crafted packet to the remote ISA Server. C Tenable Network Security, Inc...

MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

The remote host contains a version of the HTML Converter module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...