iPlanet Messaging Server - Messenger Express Expression() HTML Injection

iPlanet Messaging Server - Messenger Express Expression HTML Injection source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 Root Password Disclosure

No description provided by source. Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messaging Server is a software product that...

iPlanet Messaging Server - Messenger Express Expression() HTML Injection

source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...

IM+本地明文用户名口令泄露漏洞

IM+是一款即时消息软件，允许用户同时连接到多个即时消息帐号。 IM+在处理存储用户名口令时存在漏洞，本地攻击者可能利用此漏洞轻易获取认证信息。 IM+没有使用任何安全措施或加密保护即时消息帐号的用户名和口令。恶意用户可以在\Program Files\IMPlus目录下获得implus.cfg文件，然后使用文本编辑器打开该文件，浏览所有帐号信息，包括明文的用户名和口令。 SHAPE Services IM+ v3.10 for Pocket PC 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

ICQ Pro 2003b远程堆溢出漏洞

ICQ是一款流行的即时通讯聊天工具。 ICQ Pro 2003b build 3916客户端处理特定类型消息的长度时存在堆溢出漏洞，可能导致拒绝服务或远程执行任意代码 受影响系统： AOL ICQ Pro 2003b 不受影响系统： AOL ICQ 5.1 厂商补丁： AOL --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icq.com/...

CVE-2006-5486

Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...

CVE-2006-5486

CVE-2006-5486: Cross-site scripting in Webmail of Sun Java System Messaging Server 6.0–6.2 and iPlanet Messaging Server 5.2. Remote attackers can trigger arbitrary Javascript via crafted e-mails. Affected: Webmail component of Sun/ iPlanet Messaging Server. Root cause described as XSS via crafted...

CVE-2006-5486

Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...

Microsoft Windows Object Packager Remote Code Execution Vulnerability

Description The Microsoft Windows Object Packager is prone to a remote code-execution vulnerability. This issue is due to how the affected component handles file extensions. This vulnerability could let an attacker spoof dialogues, enticing a victim into installing a file that has been...

Microsoft Windows XML Core Services XSLT Buffer Overrun Vulnerability

Description Microsoft Windows is prone to a remotely exploitable buffer-overrun condition in the XSLT implementation of XML core services. An attacker can exploit this issue to execute arbitrary code on an unsuspecting victim's computer. This may facilitate a remote compromise. Technologies...

Microsoft XML Core Services Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. This vulnerability is caused by an error in how the affected component handles server redirects. An attacker can exploit this vulnerability by enticing a victim user into visiting a malicious web page...

SOAP Server Detection

The remote host is running a SOAP server. SOAP, originally an acronym for 'Simple Object Access Protocol', is an XML-based distributed messaging protocol typically implemented over HTTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22477; scriptversion"1.16";...

CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ AOL ICQ Pro 2003b heap overflow vulnerability Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0321 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: AOL ICQ Pr...

: AOL ICQ Pro 2003b heap overflow vulnerability

Date Published : 2006-09-07 Last Update : 2006-09-06 Advisory ID : CORE-2006-0321 Bugtraq ID : 19897 CVE Name : CVE-2006-4662 Title : AOL ICQ Pro 2003b heap overflow vulnerability Class : Boundary Error Condition Remotely Exploitable : Yes Locally Exploitable : Yes Advisory URL :...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-3935

system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to 1 send broadcast messages to all users /workplace/broadcast, 2 list all users /accounts/users, 3 add webusers...

Security Best Practice: Blocking MSN Messenger

Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.Windows Live Messenger, formerly and still...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...