Sun Java System 6.x - Messenger Express Cross-Site Scripting

Sun Java System 6.x - Messenger Express Cross-Site Scripting source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...

CVE-2006-5563

Unspecified vulnerability in Yahoo! Messenger Service 18 before 8.1.0.195 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-5563

CVE-2006-5563 affects Yahoo! Messenger (Service 18) before 8.1.0.195. Remote attackers can cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. This is the only technical detail provided by the sources; no further exploit steps, affect...

CVE-2006-5563

Unspecified vulnerability in Yahoo! Messenger Service 18 before 8.1.0.195 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from...

雅虎通会议邀请远程拒绝服务漏洞

雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理所接收到的会议邀请时存在空指针引用问题，远程攻击者可以通过发送包含有特制room name字符串的会议邀请报文导致雅虎通客户端崩溃。 Yahoo! Messenger 8.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...

Novell GroupWise Messenger fails to properly handle HTTP POST requests.

Overview Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may allow a remote attacker to cause a denial of service condition. Description Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may be triggered by sendin...

PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability

PhpBB=2.0.10 groupcp.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=666 Vulnerable Code: include$phpbbrootpath . 'includes/pageheader.'.$phpEx; ; Exploit : http://www.vicTim.com/PhpBB/groupcp.php?phpbbrootpath=shell.txt? Discoverd By :...

Debian DSA-1088-1 : centericq - buffer overflow

Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in centericq, a text-mode multi-protocol instant messenger client, which may lead local or remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2006-4511

Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...

CVE-2006-4511

Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...

CVE-2006-4511

Novell GroupWise Messenger nmma.exe servers (versions 2.0.2 and 1.0.6) are affected by a DoS vulnerability triggered by a crafted HTTP POST to TCP port 8300 with a modified val parameter. The issue is described as an invalid/null pointer dereference (zero-size strings in blowfish routines) that c...

Novell GroupWise Messenger DoS

nmma.exe service crash on malformed HTTP POST val parameter...

iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability

Novell GroupWise Messenger nmma.exe DoS Vulnerability iDefense Security Advisory 10.02.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 02, 2006 I. BACKGROUND Novell Messenger is a corporate, cross-platform instant messaging product that is based on Novell eDirectory. More information...

webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

CVE-2006-4975

CVE-2006-4975 concerns Yahoo! Messenger for WAP, where saving messages that contain JavaScript enables user-assisted remote script/HTML injection via a URL on the service. The vulnerability is tied to how messages could be stored and later rendered, allowing arbitrary script execution in affected...

AOL Instant Messenger goaway Overflow

This module exploits a flaw in the handling of AOL Instant Messenger's 'goaway' URI handler. An attacker can execute arbitrary code by supplying an overly sized buffer as the 'message' parameter. This issue is known to affect AOL Instant Messenger 5.5. This module requires Metasploit:...

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

CVE-2006-4615

The CVE documents a vulnerability in Shape Services IM+ Mobile Instant Messenger for Pocket PC, version 3.10, where usernames and passwords are stored in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg. This local-access issue allows a user with file-read privileges to obtain credentials. Affected ...