[SA12937] Sun ONE Messaging Server Webmail Session Hijacking Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA13040] Caudium HTTP Request Processing Denial of Service

TITLE: Caudium HTTP Request Processing Denial of Service SECUNIA ADVISORY ID: SA13040 VERIFY ADVISORY: http://secunia.com/advisories/13040/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Caudium 1.x http://secunia.com/product/4196/ DESCRIPTION: A vulnerability has been...

Microsoft Security Bulletin MS04-018

Microsoft Security Bulletin MS04-018 Cumulative Security Update for Outlook Express 823353 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Outlook Express® Impact of Vulnerability: Denial of Service Maximum Severity Rating: Moderate...

Microsoft Security Bulletin MS04-010

Microsoft Security Bulletin MS04-010 Vulnerability in MSN Messenger Could Allow Information Disclosure 838512 Issued: March 9, 2004 Version: 1.0 Summary Who should read this document: Customers who are using Microsoft® MSN Messenger Impact of vulnerability: Information Disclosure Maximum Severity...

Microsoft Security Bulletin MS04-008

Microsoft Security Bulletin MS04-008 Vulnerability in Windows Media Services Could Allow a Denial of Service 832359 Issued: March 9, 2004 Version: 1.0 Summary Who Should Read This Document: Customers who are using Microsoft® Windows® 2000 Impact of Vulnerability: Denial of Service Maximum Severit...

ezphotoshare.txt

eZphotoshare Multiple Overflow Vulnerabilities Credit: Author : Peter Winter-Smith Software: Package : eZphotoshare Versions : All up to and including the latest verson Vendor : eZnetwork Vendor Url : http://www.ezphotoshare.com/ Vulnerability: Bug Type : Multiple Interesting Overflows Severity :...

Microsoft Security Bulletin MS03-021: Flaw In Windows Media Player May Allow Media Library Access(Q819639)

-----BEGIN PGP SIGNED MESSAGE----- - - ------------------------------------------------------------------ Title: Flaw In Windows Media Player May Allow Media Library Access 819639 Date: 25 June 2003 Software: Microsoftr Windowsr Media Player 9 Series Impact: Information disclosure Max Risk:...

SFAD03-001: iWeb Mini Web Server Remote Directory Traversal

================================================================= ...............: S e c u r i t y F r e a k s :............... .................: www.securityfreaks.com :.................. ================================================================= Title : iWeb Mini Web Server Remote...

Fixed in Apache Tomcat 3.3.2

Moderate: Cross site scripting CVE-2003-0044 The root web application and the examples web application contained a number a cross-site scripting vulnerabilities. Note that is it recommended that the examples web application is not installed on production servers. Affects: 3.0, 3.1-3.1.1, 3.2-3.2....

Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in SMB Signing Could Enable Group Policy to be Modified 309376 Date: 11 December 2002 Software: Windows 2000, Windows XP Impact: Modify group policy Max Risk: Moderate Bulletin:...

Microsoft Security Bulletin MS02-067: E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail (331866)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail 331866 Date: 04 December 2002 Software: Microsoft Outlook 2002 Impact: Denial of Service Max Risk: Moderate Bulletin:...

Security Bulletin MS02-060: Flaw in Windows XP Help and Support Center Could Enable File Deletion (Q328940)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Windows XP Help and Support Center Could Enable File Deletion Q328940 Date: 16 October 2002 Software: Microsoft Windows XP Impact: Delete files on the user's system Max Risk:...

Squirrel Mail 1.2.7 XSS Exploit

Sorry if you receive two of these. DarC KonQuesT XSS Release- Product: Squirrel Mail 1.2.7 - released June 21, 2002 tested, others possibly vulnerable Vendor: Squirrel Mail - Web: www.squirrelmail.org Problem: Cross Site Scripting Severity: Moderate Operating Systems: Tested against Red Hat 7.3,...

Security Bulletin MS02-049: Flaw Could Enable Web Page to Launch Visual FoxPro 6.0 Application Without Warning (Q326568)

---------------------------------------------------------------------- Title: Flaw Could Enable Web Page to Launch Visual FoxPro 6.0 Application Without Warning Q326568 Date: 04 September 2002 Software: Microsoft Visual FoxPro 6.0 Impact: Attacker could gain control over user's system. Max Risk:...

Security Bulletin MS02-046: Buffer Overrun in TSAC ActiveX Control Could Allow Code Execution (Q327521)

---------------------------------------------------------------------- Title: Buffer Overrun in TSAC ActiveX Control Could Allow Code Execution Q327521 Date: 22 August 2002 Software: Microsoft Terminal Services Advanced Client TSAC ActiveX control, which can be installed on any Windows system...

Security Bulletin MS02-038: Cumulative Patch for SQL Server 2000 Service Pack 2 (Q316333)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for SQL Server 2000 Service Pack 2 Q316333 Date: 24 July 2002 Software: Microsoft SQL Server 2000, Microsoft Desktop Engine MSDE 2000 Impact: Two vulnerabilities, bo...

SECURITY vulnerability in ECS-K7S5A(L) boards

A repost, my previous one seem to have failed. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY vulnerability in ECS-K7S5AL boards DESCRIPTION =========== The administrator-password set in the BIOS of the K7S5AL locks out BIOS-access from the console. However, it does not disable access to...

Security Bulletin MS02-016 Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application

-----BEGIN PGP SIGNED MESSAGE----- Title: Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application Date: 04 April 2002 Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Impact: Attacker could block...

Microsoft Security Bulletin MS02-014

---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Lead to Code Execution Date: 07 March 2002 Software: Microsoft Windows 98, NT 4.0, 2000 Impact: Run code of attacker's choice Max Risk: Moderate Bulletin: MS02-014 Microsoft...

Fixed in Apache Tomcat 3.2.4

Moderate: Information disclosure CVE-2001-1563 No specifics are provided in the vulnerability report. This may be a summary of other issues reported against 3.2.x Affects: 3.2?, 3.2.1, 3.2.2-3.2.3?...