54 matches found
CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message...
CVE-2004-1509
validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encodedlogin parameter, which reveals the full path in an error message...
Horde-IMP: Input validation vulnerability for Internet Explorer users
Background Horde-IMP is the Internet Messaging Program. It is written in PHP and provides webmail access to IMAP and POP3 accounts. Description Horde-IMP fails to properly sanitize email messages that contain malicious HTML or script code so that it is not safe for users of Internet Explorer when...
Buffer overflow in Mutt 1.4
Mutt 1.4 contains a buffer overflow that could be exploited with a specially formed message, causing Mutt to crash or possibly execute arbitrary code...
MetaDot 5.6.5.4b5 - Multiple Vulnerabilities
MetaDot 5.6.5.4b5 - Multiple Vulnerabilities MetaDot Multiple Vulnerabilities Vendor: Metadot Corporation Product: MetaDot Version: = 5.6.5.4b5 Website: http://www.metadot.com/ BID: 9439 Description: Metadot is a popular open source portal software GPL recognized for its revolutionary ease-of-use...
ShareMailPro POP3 Interface Error Message Account Enumeration
The remote ShareMail server issues a special error message when a user attempts to log in using a nonexistent POP account. An attacker may use this flaw to make a list of valid accounts by looking at the error messages it receives at authentication time. C Tenable Network Security, Inc...
Sniffing Opera's Tracks (GM#006-OP)
GreyMagic Security Advisory GM006-OP ===================================== By GreyMagic Software, Israel. 04 Feb 2003. Available in HTML format at http://security.greymagic.com/adv/gm006-op/. Topic: Sniffing Opera's Tracks. Discovery date: 29 Jan 2003. Affected applications: =====================...
CVE-2002-0654
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...
askSam 4.0 Web Publisher - Cross-Site Scripting
askSam 4.0 Web Publisher - Cross-Site Scripting source: https://www.securityfocus.com/bid/4670/info askSam is a database system. An optional component, askSam Web Publisher versions 1 and 4, is reportedly vulnerable to cross site scripting vulnerability in the asweb.exe or asweb4.exe component...
[IMG] tag vulnerability in vBulletin
product : vbulletin versions : 2.2.2, 2.2.0 , maybe others. Probleme : One knows that if one sendings this code in private message : IMGjavascript:alert'hum';/IMG a space will be placed between "java" and "script". This filter can be by-passed : IMGjavasript:alert'hop';/IMG More details in french...
CVE-2001-0996
POP3Lite before 0.2.4 does not properly quote a . dot in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to...
CVE-2001-1084
Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message...
ICQ to ICQ Protocol vurnerable, send messages and receive from any ICQ UIN
TITLE: Send messages and receive from any ICQ UIN PLATFORM: All CREDIT: MelcoSoft CONTACT: [email protected] REMOTE: Yes LOCAL: Yes VULNERABLE: Almost all ICQ Clients Client ICQ to ICQ protocol vurnerable for details view source files... Do you want send messages and receive from any ICQ UIN ?!...