Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0

IRM, leaders in messaging systems security, have discovered six remote vulnerabilities in IBM WebSphere MQ 6.0. The vulnerabilities are currently being investigated by IBM and once patches have been developed, advisories will be published including full technical details and links to patch downlo...

D-Bus cross-application messaging system DoS

Vulnerability in matchruleequal allows application to remove rules of different applications...

ArGoSoft Mail Server Pro Webmail viewheaders Multiple Field XSS

The remote host is running ArGoSoft Mail Server Pro, a messaging system for Windows. According to its banner, the webmail server bundled with the version of ArGoSoft Mail Server Pro installed on the remote host fails to properly filter message headers before displaying them as part of a message t...

IA eMailServer IMAP SEARCH Command Remote Overflow

The remote host is running IA eMailServer, a commercial messaging system for Windows. The IMAP server bundled with the version of IA eMailServer installed on the remote host crashes when it receives a SEARCH command argument of 560 or more characters. An authenticated attacker could exploit this...

CVE-2004-2298

Affected products: Novell Internet Messaging System (NIMS) 2.6/3.0 and NetMail 3.1/3.5. Vulnerability: Installed with a default NMAP authentication credential, enabling unauthorized access. Impact: Remote attackers can read and write mail store data if the administrator does not change the creden...

CVE-2004-2298

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

CVE-2004-2298: Undefined Security Weakness

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

dbus security update

CentOS Errata and Security Advisory CESA-2005:102 Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between...

RunCMS highlight.php Information Disclosure

Binary data 2723.prm...

CVE-2004-2298

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

Citadel/UX Remote DoS Vulnerability

------------------------------------------------- No System Group - Advisory 04 - 28/07/04 ------------------------------------------------- Program: Citadel/UX Homepage: http://www.citadel.org Operating System: Linux and Unix-Compatible Vulnerable Versions: Citadel/UX v6.23 and prior Risk: Mediu...

Multiple glftpd bugs

Directory traversal in messaging system, archive extraction, effective uid problem...

CVE-2002-0971

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box...

CVE-2002-0971

CVE-2002-0971 affects VNC, TightVNC, and TridiaVNC. Local users can run arbitrary code as LocalSystem by abusing the Win32 Messaging System to bypass the VNC GUI and reach the "+Add new clients+" dialogue box. Root cause indicated by vendor descriptions is access through GUI-bypass via messaging ...

CVE-2002-0971

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box...

CVE-2002-0971: Undefined Security Weakness

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box...