3423 matches found
CVE-2006-1338: Undefined Security Weakness
Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...
CVE-2006-1213
JiRo's Banner System Experience and Professional 1.0 and earlier is affected by CVE-2006-1213, where remote attackers can bypass access restrictions and escalate privileges by making a direct request to certain files in the dsirectory (notably addadmin.asp), enabling creation of a new administrat...
CVE-2006-1213: Undefined Security Weakness
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account...
CVE-2006-1024
CVE-2006-1024 affects Addsoft StoreBot 2005 Professional via SQL injection in MgrLogin.asp, exploitable through the Pwd parameter to execute arbitrary SQL commands remotely. The description notes third-party provenance; no explicit exploit details or patch/remediation are provided in the document...
CVE-2006-1024: Undefined Security Weakness
SQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote attackers to execute arbitrary SQL commands via the Pwd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0977: Undefined Security Weakness
Craig Morrison Mail Transport System Professional aka MTS Pro acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to...
[SA19019] StoreBot 2005 Professional Edition "Pwd" SQL Injection
TITLE: StoreBot 2005 Professional Edition "Pwd" SQL Injection SECUNIA ADVISORY ID: SA19019 VERIFY ADVISORY: http://secunia.com/advisories/19019/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: StoreBot 2005 Professional Edition...
Design/Logic Flaw
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
CVE-2006-0911
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
CVE-2006-0911
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
CVE-2006-0911
CVE-2006-0911 affects Ipswitch WhatsUp Professional 2006. The vulnerable component is NmService.exe handling requests to Login.asp. The underlying issue is triggered by crafted requests that use the parameters (1) "In]" and (2) "b;tnLogIn", or (3) malformed btnLogIn, potentially involving missing...
MTS Professional < 1.61.1.85 SMTP Open Relay
Binary data 3448.prm...
Mail Transport System Professional--Open Relay Hole
What: Mail Transport System Professional is a RFC compliant mail server for Windows. Who: http://www.mtsprofessional.com/ Problem: Open relay hole when forwarding all outgoing mail through an ISP. When configured to forward all outgoing mail through an ISP MTS Pro will accept and forward all...
CVE-2006-0911: Undefined Security Weakness
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests. This issue allows remote attackers to consume excessive...
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET...
Microsoft Security Bulletin MS06-007 Vulnerability in TCP/IP Could Allow Denial of Service (913446)
Microsoft Security Bulletin MS06-007 Vulnerability in TCP/IP Could Allow Denial of Service 913446 Published: February 14, 2006 | Updated: February 14, 2006 Version: 1.1 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Denial of Service Maximum...
Microsoft Windows Web Client Buffer Overflow Vulnerability
Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...
Microsoft Windows Korean Input Method Editor Privilege Escalation Vulnerability
Description Microsoft Windows Korean Input Method Editor is prone to a local privilege-escalation vulnerability. Successful exploitation can allow local attackers to completely compromise a vulnerable computer. Technologies Affected Microsoft Office 2003 Microsoft Office 2003 SP1 Microsoft Office...