60 matches found
Cross site scripting
Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS attacks. NOTE: the provenance of this information is unknown; the details are obtain...
CVE-2007-2976
Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS attacks. NOTE: the provenance of this information is unknown; the details are obtain...
3APA3A : Frontend applications security
May 30, 2002| Client software security. 1. Introduction. Usually, when talking about attacks via the Internet and related risks, they mean the security of the mail server, the Web Server and other corporate Internet services. To ensure corporate security Internet services are usually placed in a...
Detect CIS ports
This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. If you do not use this service, then disable it as ...
IIS Global.asa Retrieval
This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...
HP-UX Security patch : PHNE_10090
The remote host is missing HP-UX Security Patch number PHNE10090 . Sendmail patches for HP-UX releases 9.X thru 10.20 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17099;...
CVE-2003-0807
CVE-2003-0807 : A denial-of-service vulnerability in Microsoft Windows where the COM Internet Services (CIS) and RPC over HTTP Proxy components can be overwhelmed by a crafted forwarded response, causing the backend to stop accepting requests. Related connected documents (MS04-012) identify this ...
Microsoft CIS and RPC over HTTP Proxy components fail to properly handle responses
Overview A vulnerability in a Microsoft HTTP Proxy component may lead to a denial of service. Description Microsoft's COM Internet Sevices CIS and Remote Procedure Call RPC over HTTP Proxy contain a vulnerability that could permit an attacker to cause a denial of service. When a forwarded request...
I2S-LAB-25-09-2003.txt
I2S LAB Security Advisory http://www.I2S-LAB.com Date : 25/09/2003 Affected systems : FirstClass build 133 SP3 and previous versions HTTP Daemon Vendor : http://www.centrinity.com Issue : Attackers can remotely shutdown internet services HTTP/FTP/SMTP/POP3/IMAP4/... Description FirstClass is a...
Microsoft Windows Media Services contains buffer overflow in "nsiislog.dll"
Overview Microsoft Windows Media Services provides streaming audio and video capabilities. A vulnerability in a component of this software could allow a remote attacker to compromise the server running it. Description According to Microsoft Security Bulletin MS03-022:Microsoft Windows Media...
CVE-2001-0631
CVE-2001-0631 affects Centrinity First Class Internet Services 5.50. The vulnerability arises from the presence of the string '' in the email From header, which bypasses default spam filters and allows remote attackers to send spoofed messages that appear to originate from local users. The provid...
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
CVE-2000-0570
FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header...
HTTP RPC Endpoint Mapper (http-rpc-epmap) Detection
This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. This script was written by Georges Dagousset See the Nessus Scripts License for details Change...
COM+ Internet Services (CIS) Server Detection
COM+ Internet Services are RPC over HTTP tunneling and require IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. This script was written by Georges Dagousset See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 10/12/09...
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
carey internets services commerce.cgi 2.0.1 - Directory Traversal
carey internets services commerce.cgi 2.0.1 - Directory Traversal source: https://www.securityfocus.com/bid/2361/info It is possible for a remote user to gain read access to directories and files outside the root directory of Carey Internet Services Commerce.cgi. Requesting a specially crafted UR...
DoS против FirstClass Internet Services
Огромный заголовок To: в письме приводит к краху сервиса...
CVE-2000-0570
FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header...
Dan Bernstein QMail 1.0 3 - RCPT Denial of Service (1)
Dan Bernstein QMail 1.0 3 - RCPT Denial of Service 1 source: https://www.securityfocus.com/bid/2237/info qmail is an e-mail server package developed by Dan Bernstein. The qmail smtp server is subject to a denial of service. By specifying a large number of addresses in the recipient field RCPT,...