2732 matches found
[SA19019] StoreBot 2005 Professional Edition "Pwd" SQL Injection
TITLE: StoreBot 2005 Professional Edition "Pwd" SQL Injection SECUNIA ADVISORY ID: SA19019 VERIFY ADVISORY: http://secunia.com/advisories/19019/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: StoreBot 2005 Professional Edition...
Design/Logic Flaw
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
CVE-2006-0911
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
CVE-2006-0911
CVE-2006-0911 affects Ipswitch WhatsUp Professional 2006. The vulnerable component is NmService.exe handling requests to Login.asp. The underlying issue is triggered by crafted requests that use the parameters (1) "In]" and (2) "b;tnLogIn", or (3) malformed btnLogIn, potentially involving missing...
CVE-2006-0911
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
MTS Professional < 1.61.1.85 SMTP Open Relay
Binary data 3448.prm...
Mail Transport System Professional--Open Relay Hole
What: Mail Transport System Professional is a RFC compliant mail server for Windows. Who: http://www.mtsprofessional.com/ Problem: Open relay hole when forwarding all outgoing mail through an ISP. When configured to forward all outgoing mail through an ISP MTS Pro will accept and forward all...
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET...
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests. This issue allows remote attackers to consume excessive...
Microsoft Security Bulletin MS06-007 Vulnerability in TCP/IP Could Allow Denial of Service (913446)
Microsoft Security Bulletin MS06-007 Vulnerability in TCP/IP Could Allow Denial of Service 913446 Published: February 14, 2006 | Updated: February 14, 2006 Version: 1.1 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Denial of Service Maximum...
Microsoft Windows Korean Input Method Editor Privilege Escalation Vulnerability
Description Microsoft Windows Korean Input Method Editor is prone to a local privilege-escalation vulnerability. Successful exploitation can allow local attackers to completely compromise a vulnerable computer. Technologies Affected Microsoft Office 2003 Microsoft Office 2003 SP1 Microsoft Office...
Microsoft Windows Web Client Buffer Overflow Vulnerability
Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...
CVE-2006-0503
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...
CVE-2006-0503
Summary of CVE-2006-0503 : The IMAP server in MailEnable Professional Edition prior to 1.72 is vulnerable to a remote denial of service via certain EXAMINE commands. Exploitation results in a service crash, affecting the MailEnable IMAP service. Remediation: upgrade to MailEnable Professional Edi...
CVE-2006-0503
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...
[SA18668] MailEnable Professional EXAMINE Command Denial of Service
TITLE: MailEnable Professional EXAMINE Command Denial of Service SECUNIA ADVISORY ID: SA18668 VERIFY ADVISORY: http://secunia.com/advisories/18668/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: MailEnable Professional 1.x http://secunia.com/product/3474/ DESCRIPTION: A...
CVE-2006-0073
CVE-2006-0073 is an XSS vulnerability reported for DiscusWare Discus Freeware 3.10.5 and Discus Freeware Professional 3.10.4. The issue arises because the application does not properly sanitize unsanitized data in the URL before including it in an error message, enabling remote attackers to injec...
[SA18283] Discus Error Message Cross-Site Scripting Vulnerability
TITLE: Discus Error Message Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18283 VERIFY ADVISORY: http://secunia.com/advisories/18283/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Discus Freeware 3.x http://secunia.com/product/6725/ Discus...
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/16119/info DiscusWare Discus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...
CVE-2005-4456
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...