[SECURITY] Fedora 7 Update: ekg-1.7-1.fc7

EKG "Eksperymentalny Klient Gadu-Gadu" is an open source gadu-gadu client for UNIX systems. Gadu-Gadu is an instant messaging program, very popular in Poland. EKG features include: - irssi-like ncurses interface - sending and receiving files - voice conversations - launching shell commands on...

CVE-2007-1663

Memory leak in the image message functionality in ekg before 1:1.7rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service...

CVE-2007-1663

Memory leak in the image message functionality in ekg before 1:1.7rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service...

CVE-2007-3263

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...

Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability because of a race-condition in its language-pack installation support. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application...

Microsoft Internet Explorer URLMON.DLL COM Object Instantiation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya...

Microsoft Internet Explorer CSS Tag Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because the application fails to properly handle certain CSS data. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologi...

Solaris 9 (sparc) : 120228-45

Messaging Server 6.3-16.01: core patch. Date this patch was last updated by Sun : Nov/30/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 120229-45 (deprecated)

Messaging Server 6.3-16.01x86: core patch. Date this patch was last updated by Sun : Nov/30/11 This plugin has been deprecated and either replaced with individual 120229 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 9 (x86) : 120229-45

Messaging Server 6.3-16.01x86: core patch. Date this patch was last updated by Sun : Nov/30/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 120228-45 (deprecated)

Messaging Server 6.3-16.01: core patch. Date this patch was last updated by Sun : Nov/30/11 This plugin has been deprecated and either replaced with individual 120228 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Cross site scripting

Cross-site scripting XSS vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653...

CVE-2007-2904

Cross-site scripting XSS vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653...

CVE-2007-2904

Sun Java System Messaging Server 6.0–6.3 is affected by CVE-2007-2904, a cross-site scripting (XSS) vulnerability exploitable via unspecified vectors when using Internet Explorer. The issue allows remote attackers to inject arbitrary web script or HTML. The vulnerability is related to CVE-2006-56...

Openfire Admin Console Remote Privilege Escalation

The remote host is running Openfire / Wildfire, an instant messaging server supporting the XMPP protocol. The version of Openfire or Wildfire installed on the remote host allows unauthenticated access to a servlet, which could allow a malicious user to upload code to Openfire via its admin consol...

XMPP Server Detection

An instant messaging server supporting the Extensible Messaging and Presence Protocol XMPP, a protocol used for real-time messaging, is listening on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Description Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application,...

MERCUR Messaging IMAP Server NTLM Authentication NTLMSSP Argument Remote Overflow

The remote host is running MERCUR Messaging, a commercial mail server for Windows. The IMAP server component of MERCUR Messaging is affected by a buffer overflow vulnerability involving its support for NTLM authentication. An unauthenticated, remote attacker can leverage this issue to crash the...

Preemptive Protection against Atrium MERCUR IMAP SUBSCRIBE Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Atrium MERCUR Messaging Server. Atrium MERCUR Messaging Server is a mail application for Windows. The flaw is in the Atrium MERCUR IMAP service. Internet Message Access Protocol IMAP is a standard protocol for accessing e-mail from a local server that...

MERCUR imapd NTLMSSP

Added: 04/03/2007 CVE: CVE-2007-1578 BID: 23058 OSVDB: 33545 Background MERCUR Messaging Server is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in MERCUR Messaging Server allows remote attackers to execute arbitrary...