5068 matches found
CVE-2005-1657
Mercur Messaging 2005 SP2 is affected by multiple directory traversal vulnerabilities. An attacker can remotely perform unauthorized file operations via Folder.Id parameters to deletefolder.ctml, deletemessage.ctml, origmessage.ctml, readmessage.ctml; the Message.Id parameter to editmessage.ctml;...
CVE-2005-1656
Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space "%20"...
CVE-2005-1657
Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to 1 deletefolder.ctml, 2 deletemessage.ctml, 3 origmessage.ctml, or 4 readmessage.ctml, the Message.Id parameter to editmessage.ctm...
Multiple Apple MacOS X vulnerabilities
NeST buffer overflow. Выполнение javascript in local context with Help Viewer, insufficient input balidation in URL Protocol Messaging, insufficient input validation in x-man-path:, insufficient input validation in terminal emulators. Multiple bluetooth vulnerabilities. vpnd buffer overflow...
Woltlab Burning Board Detection
The remote host is running Burning Board or Burning Board Lite, message forum software packages that use PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18250; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"...
Critical: Red Hat Security Advisory: gaim security update
An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...
RHEL 3 / 4 : gaim (RHSA-2005:429)
An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...
multiple remote denial of service vulnerabilities in Gaim
I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...
RunCMS highlight.php Information Disclosure
Binary data 2723.prm...
Trend Micro IMSS Console Management Detection
The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. Make sure that only authorized hosts can connect to this service, as the information of its existence may help an attacker to make more sophisticated attacks again...
Gaim vulnerable to HTML processing denial of service
Overview Gaim contains a flaw in HTML processing that may result in an invalid memory access and denial of service condition. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar...
CVE-2004-1585
CVE-2004-1585 affects Flash Messaging versions 5.2.0g and earlier . The underlying issue is a vulnerability in handling certain wide characters that can be exploited remotely to cause a denial of service via an application crash. The available documents consistently describe the affected product ...
CVE-2004-1586
Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g rev 1.1.2, which could allow remote attackers to stay connected...
CVE-2004-1585
Flash Messaging 5.2.0g rev 1.1.2 and earlier allows remote attackers to cause a denial of service application crash via certain wide characters...
CVE-2004-1586
CVE-2004-1586 affects Flash Messaging Server 5.2.0g (rev 1.1.2). The issue is that Flash Messaging clients can ignore disconnect commands (e.g., shutdown) from the server, which could allow remote attackers to remain connected. The available documents do not provide explicit exploit details or re...
CVE-2004-1443
CVE-2004-1443 is a documented XSS vulnerability in the Horde-IMP inline MIME viewer affecting Horde-IMP versions 3.2.4 and earlier when accessed with Internet Explorer. The vulnerability allows an attacker to inject arbitrary script/HTML via a crafted e‑mail message. Public assessment sources con...
Citadel/UX select() Bitmap Array Index Remote Oerflow
The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...
LinPopUp: Buffer overflow in message reply
Background LinPopUp is a graphical application that acts as a frontend to Samba client messaging functions, allowing a Linux desktop to communicate with a Microsoft Windows computer that runs Winpopup. Description Stephen Dranger discovered that LinPopUp contains a buffer overflow in string.c,...