Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers

Overview Microsoft Internet Explorer contains a vulnerability in its handling of certain MIME headers in web pages and HTML email messages. This vulnerability may allow an attacker to execute arbitrary code on the victim's system when the victim visits a web page or views an HTML email message...

Microsoft Internet Explorer (IE) calls telnet.exe with unsafe command-line arguments ("Telnet Invocation")

Overview A telnet client can be invoked with unsafe options by arbitrary HTML "web" pages when rendered by affected Microsoft Internet Explorer clients. Description This vulnerability is also known as the "telnet logging" or "telnet invocation" or "Microsoft IE Telnet Client File Overwrite"...

php-nuke.5.1.txt

PhpNuke Admin password can be stolen ! by Cabezon Aurélien | [email protected] http://www.isecurelabs.com/article.php?sid=229 FR VERSION + screen shot Vulnerable : PhpNuke 5.1 Other version : not tested PostNuke : not tested 1 Introduction I have found a way to stole PhpNuke Admin...

PhpNuke Admin password can be stolen !

PhpNuke Admin password can be stolen ! by Cabezon Aurйlien | [email protected] http://www.isecurelabs.com/article.php?sid=229 FR VERSION + screen shot Vulnerable : PhpNuke 5.1 Other version : not tested PostNuke : not tested 1 Introduction I have found a way to stole PhpNuke Admin...

Microsoft IE cookies readable via about: URLS

Microsoft Internet Explorer has a vulnerability which allows a malicious website to access any cookie in the browser's memory or those stored on disk. Cookies are used by web sites for storing preferences, statistics and tracking users, but also for storing more sensitive information such as...

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing

Serious security Flaw in Microsoft Internet Explorer - Zone Spoofing ------ Risk: POTENTIALLY HIGH. Potentially allowing any possible action on the client machine, including reading any file, placing Trojan code or altering data. The risk depends on the security settings in the 'Intranet zone'...

CVE-2001-1450

Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service browser crash via a crafted FTP URL such as "/../"...

Advisory CA-2001-06

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-06 Automatic Execution of Embedded MIME Types Original release date: April 03, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected All versions of Microsoft Internet...

Microsoft Internet Explorer 5.0.15.56.0 - Telnet Client File Overwrite

Microsoft Internet Explorer 5.0.15.56.0 - Telnet Client File Overwrite source: https://www.securityfocus.com/bid/2463/info Services for Unix 2.0 contains a client side logging option which records all information exchanged in a telnet session. A vulnerability exists that could enable a remote use...

Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption (Denial of Service)

Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption Denial of Service source: https://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to...

CVE-2000-0790

The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file...

Microsoft Virtual Machine - Arbitrary Java Codebase Execution

Microsoft Virtual Machine - Arbitrary Java Codebase Execution source: https://www.securityfocus.com/bid/1812/info An attacker may gain read access on remote systems by specifying a custom codebase in a Java applet, and delivering to the victims via HTML email or a website. Any arbitrary codebase...

Microsoft Internet Explorer 5.5 ASCII equivalent of "%01" security vulnerability....

The following security vulnerability has been found in Microsoft Internet Explorer version 5.5 When "
" an undisplayable character, which is eaqual to the 1st caharacter in ASCII table - after the 0th... inserted in some strategic position in Javascript code ,it is possible to access to local fil...

Microsoft Windows Script Host 5.15.5 - GetObject() File Disclosure

Microsoft Windows Script Host 5.15.5 - GetObject File Disclosure source: https://www.securityfocus.com/bid/1718/info It is possible for an outside attacker to view known files on a remote system if the target user visits a website or opens an email containing a specially formed script containing...

Security Bulletin (MS00-059)

Microsoft Security Bulletin MS00-059 - -------------------------------------- Patch Available for "Java VM Applet" Vulnerability Originally posted: August 21, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Microsoftr virtual machine Microsoft V...

Advisory CA-2000-16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CERT Advisory CA-2000-16 Microsoft 'IE Script'/Access/OBJECT Tag Vulnerability Original release date: August 11, 2000 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Internet Explorer 4.x, 5.x...

Internet Security Systems Security Alert: Brown Orifice, BOHTTPD, a Platform Independent Java Vulnerability in Netscape

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Alert August 7, 2000 Brown Orifice, BOHTTPD, a Platform Independent Java Vulnerability in Netscape Synopsis: On August 5th, code was made public by Dan Brumleve, which demonstrates a serious security hole in the Netscape Java...

Advisory CA-2000-12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CERT Advisory CA-2000-12 HHCtrl ActiveX Control Allows Local Files to be Executed Original release date: June 19, 2000 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft...

ALERT: Bypassing Warnings For Invalid SSL Certificates In Internet Explorer

=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 1999-12-15-1-PUB ------------------------------------------------------------------------- Bypassing Warnings For Invalid SSL Certificates In Internet Explorer...

Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag

Microsoft Internet Explorer 4.04.0.15.05.0.15.5 - preview Security Zone Settings Lag Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT...