Cross site request forgery (csrf)

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

CVE-2008-3778

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

Linux Kernel x86_64 ptrace Denial Of Service Vulnerability

Linux内核存在拒绝服务漏洞，当进程执行在64位的计算机时。 本地攻击者可以利用这个问题的崩溃和内核拒绝服务的合法用户。 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10...

Mercur Mailserver/Messaging <= 5.0 IMAP Overflow Vulnerability

The Mercur IMAP4 Service running on the host is vulnerable to buffer overflows by sending a special crafted SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Mercur Mailserver/Messaging version <= 5.0 IMAP Overflow Vulnerability

The Mercur IMAP4 Service is running on the remote host. Description : A version of Mercur Mailserver or Messaging Server is installed on the remote host. It is a complete messaging solution including common functions like 'smtp/pop3/imap4-server'. The Mercur IMAP4 Service is vulnerable to buffer...

Microsoft Excel Record Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel Credential Caching Vulnerability

Description Microsoft Excel is prone to a vulnerability that allows unauthorized access to remote data source credentials that have been cached in Excel files. This issue is limited to Microsoft Excel 2007 and Microsoft Office 2008 for Mac. Technologies Affected Avaya Messaging Application Server...

Microsoft Windows Image Color Management Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because of a flaw in the Microsoft Color Management System MSCMS module of the Image Color Management System ICM. An attacker could exploit this issue by enticing a victim to open a malicious image file. Successfully...

Trend Micro产品ObjRemoveCtrl类缓冲区溢出漏洞

BUGTRAQ ID:30633 CVE ID：CVE-2008-3364 CNCVE ID：CNCVE-20083364 多个Trend Micro产品处理ObjRemoveCtrl类存在安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当通过WEB接口配置产品时OfficeScan Web控制台利用多个ActiveX控件，其中ObjRemoveCtrl类ActiveX控件存在边界错误，可触发基于堆栈的缓冲区溢出，精心构建WEB页，诱使用户访问可导致应用程序权限执行任意指令。 Trend Micro Client Server Messaging Security for...

Extmail security vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability description: ExtMail Project is an active open source messaging system project is currently by ExtMail team maintenance. The item in 2 0 0 5 years 9 on 1 8 November the official launch, initially in the WebMail software is based, has been gradually formed ExtMail software series. Th...

Unfixed XSS vulnerability at www.rentmore.us

Security researcher Uber0n, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.rentmore.us, which at the time of submission ranked 4742346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...

DSA-1610-1 gaim - execution of arbitrary code

Bulletin has no description...

Input validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

Microsoft Outlook Web Access for Exchange Server Email Field Cross-Site Scripting Vulnerability

Description Microsoft Outlook Web Access OWA for Exchange Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Microsoft Windows Explorer saved-search File Remote Code Execution Vulnerability

Description Microsoft Windows Explorer is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code with the privileges of the user running the affected application. Technologies Affected Avaya Messaging Application Server...

DEBIAN-CVE-2008-2927

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message wi...

Pidgin 2.4.1 Vulnerability

Application: Pidgin 2.4.1 OS: Linux - Ubuntu 8.04 ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description Pidgin is an instant messaging program with which you can use a number of...

gtalk-inject.txt

Gtalk 1.0.0.105 html injection and Stealing messages Vendor url:http://www.google.com Advisore:http://lostmon.blogspot.com/2008/06/ gtalk-100105-html-injection-and.html Vendor notify:yes exploit available:yes GTalk is a service offered by Google instant messaging. It allows communication via...

Microsoft Word Bulleted List Handling Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open and interact with malicious Word files. Successfully exploiting this issue will corrupt memory and crash the application. Given the nature of this...