CVE-2007-3203

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Stack overflow

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3203

CVE-2007-3203 : A stack-based buffer overflow in smtpdll.dll of the SMTP service in 602Pro LAN SUITE 2003 (version 2003.0.03.0828) allows remote attackers to execute arbitrary code via an e-mail message containing a long address. This is a confirmed vulnerability with CVSS v2 base score 7.5 (Netw...

CVE-2007-3203

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3203: Undefined Security Weakness

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

MadWifi: Multiple vulnerabilities

Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description Md Sohail Ahmad from AirTight Networks has discovered a divison by zero in the athbeaconconfig function CVE-2007-2830. The vendor has corrected an input validation error in the...

Design Flaw in Deutsche Telekom Speedport w700v broadband router

Hi, I'd like to inform you about a vulnerability in the Deutsche Telekom Speedport w700v DSL router. Currently it's the standard device that is shipped with new DSL contracts. I - TITLE Security advisory: Weaknesses in the login process of the web interface of the Speedport w700v DSL Router and...

Then talk about the Exchange environment session hijacking(For windows2000)-vulnerability warning-the black bar safety net

The first step is to open the IP Routing function, modify the registry HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter to 0x1, and restart the system. The second step is ARP spoofing, the specific principle I will not say. The third step is to start the hijackin...

CVE-2007-2205

This CVE (CVE-2007-2205) is a PHP remote file inclusion in LAN Management System (LMS) prior to or around version 1.5.3/1.5.4. The vulnerability is triggered in modules/rtmessageadd.php via the _LIB_DIR parameter, enabling an attacker to load a crafted URL and execute arbitrary PHP code. The avai...

CVE-2007-2205

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System LMS 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643...

Cross site scripting

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2198

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2198

CVE-2007-2198 describes a cross-site scripting (XSS) vulnerability in the LAN Management System (LMS) prior to 1.6.9. The issue allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors, with likely involvement of the OD parameter in contrib/formularz_przelewu_wplaty...

CVE-2007-2198: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2205: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System LMS 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643...

CVE-2007-2041

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

CVE-2007-2036

The SNMP implementation in the Cisco Wireless LAN Controller WLC before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384...

Code injection

The Network Processing Unit NPU in the Cisco Wireless LAN Controller WLC before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service loss of packet forwarding via 1 crafted SNAP packets, 2 malformed 802.11 traffic, or 3...

CVE-2007-2039

The Network Processing Unit NPU in the Cisco Wireless LAN Controller WLC before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service loss of packet forwarding via 1 crafted SNAP packets, 2 malformed 802.11 traffic, or 3...

CVE-2007-2038

The Network Processing Unit NPU in the Cisco Wireless LAN Controller WLC before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service loss of packet forwarding via 1 crafted SNAP packets, 2 malformed 802.11 traffic, or 3...