276 matches found
Apple iCal 3.0.1 - 'TRIGGER' Denial of Service
source: https://www.securityfocus.com/bid/28632/info Apple iCal is prone to a denial-of-service vulnerability because it fails to handle specially crafted files. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects iCal 3.0....
wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities
No description provided by source. wolioCMS - SQL Injection and Bypass Administrator Login Vendor : http://www.buton.web.id/member.php?member=anon Download : http://www.buton.web.id/download/woliocms.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net...
Microsoft Exchange Server iCal Properties Denial of Service (MS07-026; CVE-2007-0039)
Simple Mail Transfer Protocol SMTP is a core Internet protocol used for transferring e-mail across the Internet. The Microsoft Exchange Server is a collaborative software server from Microsoft capable of handling numerous Internet protocols, including the Simple Mail Transfer Protocol SMTP. It is...
Microsoft Exchange iCal请求远程拒绝服务漏洞（MS07-026）
Microsoft Exchange Server是一款流行的邮件服务器。 Microsoft Exchange中负责解析iCal邮件附件的代码中漏洞，远程攻击者可能利用此漏洞导致Exchange进程崩溃。 iCal文件格式包含有一系列的记录，由BEGIN和END标签划分开，每个记录都可能包含有多个命名属性。Exchange的iCal解析器维护一个当前环境中有效属性的表格，遇到新的记录就会切换到合适的表格。X-MICROSOFT-CDO-MODPROPS属性是一个Microsoft扩展，允许iCal文件指定特定记录中应认为有效的属性列表，这时Exchange会乎略所有其他属性，如下所示：...
Microsoft Exchange multiple security vulnerabilities
OWA crossite scripting, IMAP DoS, iCal parsing DoS, Base64 decoding memory corruption, IMAP DoS...
Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)
Determina Security Research Exchange Calendar MODPROPS Denial of Service http://www.determina.com/security.research/vulnerabilities/exchange-ical-modprops.html CVE ID: CVE-2007-0039 MS ID: MS07-026 Vendor notification: Dec 20, 2006 Vendor patch: May 8, 2007 Systems Affected: Exchange 2000 Exchang...
Null pointer dereference
The Exchange Collaboration Data Objects EXCDO functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service crash via an Internet Calendar iCal file containing multiple X-MICROSOFT-CDO-MODPROPS MODPROPS properties in which the...
CVE-2007-0039
The Exchange Collaboration Data Objects EXCDO functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service crash via an Internet Calendar iCal file containing multiple X-MICROSOFT-CDO-MODPROPS MODPROPS properties in which the...
CVE-2007-0039
The Exchange Collaboration Data Objects EXCDO functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service crash via an Internet Calendar iCal file containing multiple X-MICROSOFT-CDO-MODPROPS MODPROPS properties in which the...
CVE-2007-0039
CVE-2007-0039 describes a Denial of Service vulnerability in Microsoft Exchange Server caused by malformed iCal handling in the EXCDO component. The issue occurs when parsing iCal data with multiple X-MICROSOFT-CDO-MODPROPS properties; if a second MODPROPS entry is longer than the first, a NULL p...
Microsoft Exchange iCal Request Remote Denial of Service Vulnerability
Description Microsoft Exchange is prone to a remote denial-of-service vulnerability because it fails to properly handle unexpected iCal message content. Successfully exploiting this issue allows remote attackers to cause targeted Exchange servers to stop responding to further requests for sending...
MDKA-2006:050 : ical
The Ical package in Mandriva Linux 2007 fails to run due to old code that does not work with current versions of TCL. Additionally, the application did not appear in the menu and the URL was obsolete. This updated package fixes these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Microsoft Outlook VEVENT记录远程代码执行漏洞（MS07-003）
Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook在处理畸形VEVENT记录时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 攻击可以通过处理包含畸形VEVENT记录的.ics（iCal）文件来利用此漏洞，如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Outlook 2003 Microsoft Outlook 200...
Multiple Microsoft Outlook security vulnerabilities
DoS. Buffer overflow on .iCal and .oss files parsing...
CVE-2007-0033
CVE-2007-0033 is a memory corruption/remote code execution vulnerability in Microsoft Outlook 2002 and 2003 triggered by parsing a malformed VEVENT record in an iCalendar (.ics) file or meeting request. The flaw arises from inadequate validation when processing VEVENT data, enabling a user-assist...
Microsoft Outlook VEVENT Record Remote Code Execution Vulnerability
Description Microsoft Outlook is prone to a remote code-execution vulnerability because the application fails to properly handle malformed iCal requests. A remote attacker can exploit this issue to execute arbitrary code with the privileges of unsuspecting users. A successful exploit may aid in t...
Microsoft Exchange Server日历远程代码执行漏洞（MS06-019）
Microsoft Exchange是一款由微软开发的邮件服务程序。 Exchange Server所提供的EXCDO和CDOEX功能没有正确地处理邮件消息中的某些iCAL和vCAL属性，远程攻击者可以向Exchange Server发送包含有特制vCAL或iCAL属性的邮件消息导致代码执行。 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1 Microsoft Exchange Server 2000 临时解决方法： NSFOCUS建议采取如下措施以降低威胁：...
Microsoft Exchange Calendar code execution
Server doesn't properly handles iCal and vCal properties of MIME message...
CVE-2006-0027
CVE-2006-0027 describes a remote code execution vulnerability in Microsoft Exchange Server triggered by specially crafted vCal/iCal properties in email messages. Public sources (MS06-019) document a heap overflow in MODPROP handling within VCAL requests as the underlying root cause. Affected prod...