Update Protection against Microsoft Exchange Vulnerability (MS06-019)

A vulnerability exists in Microsoft Exchange Server that could allow an attacker to take complete control of the affected system. To exploit the vulnerability, an attacker would have to construct a specially crafted message that could potentially allow remote code execution when an Exchange Serve...

Microsoft Exchange fails to properly handle vCal and iCal properties

Overview Microsoft Exchange Server does not properly handle the vCal and iCal properties of email messages. Exploitation of this vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on an Exchange Server. Description Microsoft Exchange Server Microsoft's Exchange...

PHP iCalendar publish.ical.php Arbitrary File Upload

The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The installed version of PHP iCalendar supports iCal publishing but does not properly restrict the types of files uploaded and places them in a web-accessible directory. An unauthenticated...

CVE-2006-0924

Affected product : Brown Bear iCal 3.10. Vulnerability : Cross-site scripting (XSS) via the Calendar Text field when adding a new event. Impact : remote attackers can inject arbitrary web script or HTML. Root cause : insufficient sanitization/input handling in the Calendar Text field. Exploitatio...

[SA19001] iCal "Calendar Text" Script Insertion Vulnerability

TITLE: iCal "Calendar Text" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19001 VERIFY ADVISORY: http://secunia.com/advisories/19001/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: iCal 3.x http://secunia.com/product/931/ DESCRIPTION: KeyShore and...

CVE-2003-1263

CVE-2003-1263 affects the ICAL.EXE component in iCal 3.7. A malformed HTTP request (possibly due to an invalid method name) can cause a remote DoS crash. Public details consistently describe a crash condition without providing exploit code, vectors, or patched versions. The available records do n...

CVE-2003-1263

ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service crash via a malformed HTTP request, possibly due to an invalid method name...

CVE-2004-1021

iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms...

CVE-2004-1021

CVE-2004-1021 affects iCal prior to 1.5.4 on Mac OS X 10.2.3 and later. The underlying issue is that iCal does not alert the user for alarms in calendars, enabling an attacker to cause the execution of programs and sending of email via alarms. The description and public references in the provided...

CVE-2004-1021

iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms...

iCal < 1.5.4

The remote host is running a version of iCal which is older than version 1.5.4. Such versions have an arbitrary command execution vulnerability. A remote attacker could exploit this by tricking a user into opening or importing a new iCal calendar. TRUSTED...

CVE-2003-1263

ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service crash via a malformed HTTP request, possibly due to an invalid method name...

ical 3.7 remote dos

hi iCal http://www.brownbearsw.comis a web-based calendar that can be used to show meetings, events, or other schedules. calendars can be viewed, edited, and administered totally through the web. iCal is build for thin-clients, so access calendar without any plug-ins or java interpreters. I found...

Multiple iCal bugs

DoS, physical path disclosure...

iCal 3.7 - Remote Buffer Overflow (PoC)

iCal 3.7 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/6506/info A buffer overflow vulnerability has been reported for iCal. The vulnerability occurs when the iCal web server receives an overly long HTTP request. This will cause iCal to crash and result in a denial of...

iCal 3.7 - Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/6506/info A buffer overflow vulnerability has been reported for iCal. The vulnerability occurs when the iCal web server receives an overly long HTTP request. This will cause iCal to crash and result in a denial of service condition. Restarting the service...

iCal 3.7 - HTTP Request Denial of Service

iCal 3.7 - HTTP Request Denial of Service source: https://www.securityfocus.com/bid/6505/info A denial of service vulnerability has been reported for iCal. The vulnerability occurs when iCal receives a specially formatted HTTP request. This will cause iCal to crash thereby leading to a denial of...

iCal 3.7 - HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/6505/info A denial of service vulnerability has been reported for iCal. The vulnerability occurs when iCal receives a specially formatted HTTP request. This will cause iCal to crash thereby leading to a denial of service. Restarting the service is necessa...

CVE-2000-1072

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse...

CVE-2000-1074

CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...