CVE-2007-5830

This CVE (CVE-2007-5830) affects Avaya Messaging Storage Server (MSS) 3.1 before SP1 and Message Networking (MN) 3.1. A vulnerability in the administrative interface allows remote denial-of-service via input validation issues. The NVD entry provides a CVSSv2 base score of 7.8 (HIGH) with network ...

CVE-2007-5830

Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server MSS 3.1 before SP1, and Message Networking MN 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation."...

CVE-2007-5830: Improper Input Validation

Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server MSS 3.1 before SP1, and Message Networking MN 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation."...

[SECURITY] Fedora 7 Update: pidgin-2.2.2-1.fc7

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

CVE-2002-2408

Gordano Messaging Server GMS Mail 8 a.k.a. NTMail only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server...

CVE-2002-2408

Gordano Messaging Server (GMS) Mail 8 (NTMail) is affected. The vulnerability arises because the server only filters messages for the first recipient, allowing an attacker to bypass JUCE filters by sending a single message to multiple users on the GMS server. The connected Red Hat and CVE records...

CVE-2002-2408: Undefined Security Weakness

Gordano Messaging Server GMS Mail 8 a.k.a. NTMail only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server...

Miranda IM多个远程栈溢出漏洞

BUGTRAQ ID: 26115 CVECAN ID: CVE-2007-5542,CVE-2007-5543 Miranda IM是Microsoft Windows平台上使用的开源多协议即时消息客户端。 Miranda IM没有正确地实现雅虎通协议，如果向客户端发送了畸形的雅虎通报文的话，就可以触发栈溢出，导致执行任意指令。 Miranda Miranda IM 0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/showfiles.php?groupid=94142...

Buffer overflow

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

EUVD-2007-5565

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

CVE-2007-5590: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

openSUSE 10 Security Update : heartbeat (heartbeat-2139)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. CVE-2006-3815,CVE-2006-3121 %NASLMINLEVEL 70300 C Tenable Network...

Solaris 10 (x86) : 126480-26 (deprecated)

Messaging Server 64bit 6.3-16.01x86: core patch. Date this patch was last updated by Sun : Nov/30/11 This plugin has been deprecated and either replaced with individual 126480 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 9 (x86) : 126480-26

Messaging Server 64bit 6.3-16.01x86: core patch. Date this patch was last updated by Sun : Nov/30/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Solaris 9 (sparc) : 126479-26

Messaging Server 64bit 6.3-16.01: core patch. Date this patch was last updated by Sun : Nov/30/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Reporting Vulnerable Public Web mail

Reporting Vulnerable Public Software Technical Details: +===========================================================================+ + MailBee WebMail Pro =3.4 XSS Multiple Remote Vulnerabilities + +===========================================================================+ Authors: Ivan Sanche...

CVE-2007-5227

Multiple cross-site scripting XSS vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the 1 subjectt and 2 bodytext parameters. NOTE: vector 2...

CVE-2007-5227: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the 1 subjectt and 2 bodytext parameters. NOTE: vector 2...

Microsoft Windows URI Handler Command Execution Vulnerability

Description Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow malicio...