PT-2005-2309 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 7.0 through 7.0.1 Description: The issue allows remote attackers to determine the existence of files via Javascript containing XML script. This is related to the XML External Entity vulnerability...

PT-2004-1312 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook version 2002 Description: The issue concerns an argument injection vulnerability where Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE. Thi...

ZH2004-09SA.txt

ZH2004-09SA security advisory: PhpNewsManager Remote arbitrary files retrieving Discovered: 02 february 2004 Vendor Contacted: 10 february 2004 Published: 23 february 2004 Name: PhpNewsManager Affected Systems: 1.46 Issue: Remote file retrieving Author: G00db0y from Zone-h Security Labs -...

ZH2004-06SA.txt

ZH2004-06SA security advisory: ShopCartCGI v2.3 Remote arbitrary file retrieving Published: 17 february 2004 Released: 17 february 2004 Name: ShopCartCGI Affected Systems: 2.3 Issue: Remote arbitrary file retrieving Author: G00db0y from Zone-h Security Labs - [email protected] -...

Worldspan for Windows Gateway Res Manager Port 17990 Malformed Request DoS

It was possible to crash the Worldspan gateway by sending illegal data. An attacker may use this attack to make this service crash continuously. C Tenable Network Security, Inc. This script was written by Michel Arboi , starting from quake3dos.nasl and a proof of concept code by Script audit and...

Lotus Notes R5 clients - no warning for broken signature or encryption

7 Nov 2000 Lotus Notes R5 clients - no warning for broken signature or encryption AFFECTED VERSIONS All R5 client versions up to the latest R5.0.5 PROBLEM DESCRIPTION If you receive a clear signed S/MIME e-mail with a broken signature, e.g. the mail body is modified by a third party during...