CVE-2007-0938

CVE-2007-0938 describes a remote code execution vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2, caused by improper handling of certain characters in crafted HTTP requests. The CMS Memory Corruption vulnerability could allow an attacker to take control of an affe...

CVE-2007-0939

CVE-2007-0939 is an XSS vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2. The issue arises from MCMS not fully validating input in HTML redirect queries, allowing remote attackers to inject script or HTML that runs in a user’s browser. Exploitation requires user i...

Microsoft Content Management Server multiple security vulnerabilities

Crossite scripting, memory corruption...

Microsoft Security Bulletin MS07-018 Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

Microsoft Security Bulletin MS07-018 Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution 925939 Published: April 10, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Content Management Server Impact of Vulnerability: Remote...

Microsoft Content Management Server Cross-Site Scripting Vulnerability

Description Microsoft Content Management Server MCMS is prone to an unspecified cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Microsoft Content Management Server Remote Code Execution Vulnerability

Description Microsoft Content Management Server MCMS is prone to an arbitrary code-execution vulnerability because the software fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to execute arbitrary machine code on affected computers with the privileges...

Format string

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

CVE-2007-1557

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

F-Secure Anti-Virus Client Security本地格式串处理漏洞

F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统，支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞，如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话，就可以读写任意内存，并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...

F-Secure anti-virus format string vulnerability

Format string vulnerability in management server name allows local privilege escalation...

Eudora WorldMail Mail Management Server (MAILMA.exe) Remote Overflow

The remote host is running Eudora WorldMail, a commercial mail server for Windows. According to its banner, the version of Eudora Worldmail installed on the remote host contains a heap-based buffer overflow flaw in its Mail Management Agent. Using a specially crafted request, an unauthenticated,...

Design/Logic Flaw

Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service application stop via unexpected data...

CVE-2007-0615

Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service application stop via unexpected data...

CVE-2007-0615

Technical details (affected product version, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain concrete exploit methods, impacted configurations, and fixes.

CVE-2007-0615

Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service application stop via unexpected data...

CVE-2006-6336

CVE-2006-6336 – Eudora WorldMail Mail Management Server (MAILMA.exe) affects Eudora WorldMail 3.1.x. The flaw is a heap-based buffer overflow in the Mail Management Server’s parsing of successive delimiters, enabling an unauthenticated, remote attacker to execute arbitrary code by sending a craft...

QUALCOMM Eudora WorldMail Remote Management Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Eudora WorldMail. Authentication is not required to exploit this vulnerability. The specific flaw exists during the parsing of successive delimiters within the Mail Management Server, MAILMA.exe, listenin...

CVE-2006-6387

Multiple SQL injection vulnerabilities in LINK Content Management Server CMS allow remote attackers to execute arbitrary SQL commands via the 1 IDMeniGlavni parameter to navigacija.php, and the 2 IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is...

CVE-2006-6387

Multiple SQL injection vulnerabilities in LINK Content Management Server CMS allow remote attackers to execute arbitrary SQL commands via the 1 IDMeniGlavni parameter to navigacija.php, and the 2 IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is...

Update Protection against Symantec Sygate Management Server SQL Injection Vulnerability

A vulnerability was identified in Symantec's Sygate Management Server SMS. A remote attacker could supply code into a URL which would allow the attacker to overwrite the password for any SMS account. Successful exploitation would allow the attacker to access any SMS console with the account's...