multiple remote denial of service vulnerabilities in Gaim

I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...

RunCMS highlight.php Information Disclosure

Binary data 2723.prm...

Trend Micro IMSS Console Management Detection

The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. Make sure that only authorized hosts can connect to this service, as the information of its existence may help an attacker to make more sophisticated attacks again...

Gaim vulnerable to HTML processing denial of service

Overview Gaim contains a flaw in HTML processing that may result in an invalid memory access and denial of service condition. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar...

CVE-2004-1585

CVE-2004-1585 affects Flash Messaging versions 5.2.0g and earlier . The underlying issue is a vulnerability in handling certain wide characters that can be exploited remotely to cause a denial of service via an application crash. The available documents consistently describe the affected product ...

CVE-2004-1585

Flash Messaging 5.2.0g rev 1.1.2 and earlier allows remote attackers to cause a denial of service application crash via certain wide characters...

CVE-2004-1586

Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g rev 1.1.2, which could allow remote attackers to stay connected...

CVE-2004-1586

CVE-2004-1586 affects Flash Messaging Server 5.2.0g (rev 1.1.2). The issue is that Flash Messaging clients can ignore disconnect commands (e.g., shutdown) from the server, which could allow remote attackers to remain connected. The available documents do not provide explicit exploit details or re...

CVE-2004-1586: Undefined Security Weakness

Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g rev 1.1.2, which could allow remote attackers to stay connected...

CVE-2004-1585: Undefined Security Weakness

Flash Messaging 5.2.0g rev 1.1.2 and earlier allows remote attackers to cause a denial of service application crash via certain wide characters...

CVE-2004-1443

CVE-2004-1443 is a documented XSS vulnerability in the Horde-IMP inline MIME viewer affecting Horde-IMP versions 3.2.4 and earlier when accessed with Internet Explorer. The vulnerability allows an attacker to inject arbitrary script/HTML via a crafted e‑mail message. Public assessment sources con...

Citadel/UX select() Bitmap Array Index Remote Oerflow

The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...

LinPopUp: Buffer overflow in message reply

Background LinPopUp is a graphical application that acts as a frontend to Samba client messaging functions, allowing a Linux desktop to communicate with a Microsoft Windows computer that runs Winpopup. Description Stephen Dranger discovered that LinPopUp contains a buffer overflow in string.c,...

CVE-2004-1585

Flash Messaging 5.2.0g rev 1.1.2 and earlier allows remote attackers to cause a denial of service application crash via certain wide characters...

CVE-2004-1586

Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g rev 1.1.2, which could allow remote attackers to stay connected...

CVE-2004-2535

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key...

CVE-2004-2298

Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...

[SA13497] Sun Java Messaging Server Webmail Script Insertion Vulnerability

TITLE: Sun Java Messaging Server Webmail Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13497 VERIFY ADVISORY: http://secunia.com/advisories/13497/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Sun Java System Messaging Server 6.x...

[SA12937] Sun ONE Messaging Server Webmail Session Hijacking Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Buffer-overflow in ShixxNOTE 6.net

Luigi Auriemma Application: ShixxNote 6.net http://www.shixxnote.com Versions: 6.net, doesn't exist a specific version or build number but the latest change in Readme.txt something similar to a changelog is 117 Platforms: Windows Bug: buffer-overflow Exploitation: remote Date: 13 October 2004...