2407 matches found
CVE-2006-5653
Sun Java System Messenger Express 6 is affected by a cross-site scripting (XSS) vulnerability in the errorHTML function of the index script, exploitable via the error parameter. The issue enables remote injection of script/HTML and is cataloged as CVE-2006-5653 with a MEDIUM impact (PARTIAL integ...
Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...
SystemMessenger_xss.txt
------=Part15425083137.1162268411579 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sun java System Messenger Express remote XSS vulnerabilities By: Handrix 29 November 2006 MorX security research team www.morx.org...
Sun Java System 6.x - Messenger Express Cross-Site Scripting
source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser ...
iPlanet Messaging Server - Messenger Express Expression() HTML Injection
source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...
Sun Java System 6.x - Messenger Express Cross-Site Scripting
Sun Java System 6.x - Messenger Express Cross-Site Scripting source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...
CVE-2006-5563
Unspecified vulnerability in Yahoo! Messenger Service 18 before 8.1.0.195 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from...
CVE-2006-5563
Unspecified vulnerability in Yahoo! Messenger Service 18 before 8.1.0.195 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from...
CVE-2006-5563
CVE-2006-5563 affects Yahoo! Messenger (Service 18) before 8.1.0.195. Remote attackers can cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. This is the only technical detail provided by the sources; no further exploit steps, affect...
雅虎通会议邀请远程拒绝服务漏洞
雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理所接收到的会议邀请时存在空指针引用问题，远程攻击者可以通过发送包含有特制room name字符串的会议邀请报文导致雅虎通客户端崩溃。 Yahoo! Messenger 8.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...
Novell GroupWise Messenger fails to properly handle HTTP POST requests.
Overview Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may allow a remote attacker to cause a denial of service condition. Description Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may be triggered by sendin...
PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability
PhpBB=2.0.10 groupcp.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=666 Vulnerable Code: include$phpbbrootpath . 'includes/pageheader.'.$phpEx; ; Exploit : http://www.vicTim.com/PhpBB/groupcp.php?phpbbrootpath=shell.txt? Discoverd By :...
Debian DSA-1088-1 : centericq - buffer overflow
Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in centericq, a text-mode multi-protocol instant messenger client, which may lead local or remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2006-4511
Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...
CVE-2006-4511
Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...
CVE-2006-4511
Novell GroupWise Messenger nmma.exe servers (versions 2.0.2 and 1.0.6) are affected by a DoS vulnerability triggered by a crafted HTTP POST to TCP port 8300 with a modified val parameter. The issue is described as an invalid/null pointer dereference (zero-size strings in blowfish routines) that c...
Novell GroupWise Messenger DoS
nmma.exe service crash on malformed HTTP POST val parameter...
iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability
Novell GroupWise Messenger nmma.exe DoS Vulnerability iDefense Security Advisory 10.02.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 02, 2006 I. BACKGROUND Novell Messenger is a corporate, cross-platform instant messaging product that is based on Novell eDirectory. More information...
webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit
============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...