CVE-2006-0503

Summary of CVE-2006-0503 : The IMAP server in MailEnable Professional Edition prior to 1.72 is vulnerable to a remote denial of service via certain EXAMINE commands. Exploitation results in a service crash, affecting the MailEnable IMAP service. Remediation: upgrade to MailEnable Professional Edi...

CVE-2006-0503

IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...

[SA18668] MailEnable Professional EXAMINE Command Denial of Service

TITLE: MailEnable Professional EXAMINE Command Denial of Service SECUNIA ADVISORY ID: SA18668 VERIFY ADVISORY: http://secunia.com/advisories/18668/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: MailEnable Professional 1.x http://secunia.com/product/3474/ DESCRIPTION: A...

CVE-2006-0503: Undefined Security Weakness

IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...

CVE-2006-0073

CVE-2006-0073 is an XSS vulnerability reported for DiscusWare Discus Freeware 3.10.5 and Discus Freeware Professional 3.10.4. The issue arises because the application does not properly sanitize unsanitized data in the URL before including it in an error message, enabling remote attackers to injec...

CVE-2006-0073: Undefined Security Weakness

Cross-site scripting XSS vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, which is not properly sanitized from the resulting error message. NOTE: the provenance of this...

[SA18283] Discus Error Message Cross-Site Scripting Vulnerability

TITLE: Discus Error Message Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18283 VERIFY ADVISORY: http://secunia.com/advisories/18283/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Discus Freeware 3.x http://secunia.com/product/6725/ Discus...

DiscusWare Discus 3.10 - Error Message Cross-Site Scripting

DiscusWare Discus 3.10 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/16119/info DiscusWare Discus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

CVE-2005-4456

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...

CVE-2005-4456

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...

CVE-2005-4456

CVE-2005-4456 describes multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 prior to patch ME-10009, enabling remote attackers to crash the service and possibly execute arbitrary code via long LIST, LSUB, and UID FETCH commands. The description notes these may be alternat...

CVE-2005-4456: Undefined Security Weakness

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...

CVE-2005-4402

CVE-2005-4402 describes a buffer overflow in MailEnable Professional (1.71 and earlier) and MailEnable Enterprise (1.1 and earlier). The root cause is a buffer overflow triggered by a long IMAP EXAMINE command, allowing remote authenticated users to potentially execute arbitrary code. The availab...

CVE-2005-4402

Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command...

CVE-2005-4360

The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...

CVE-2005-4360

The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...

CVE-2005-4402: Undefined Security Weakness

Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command...

CVE-2005-4360: Unchecked Return Value

The URL parser in Microsoft Internet Information Services IIS 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "0" through "9", which causes ntdll.dll to produce a return value that is not correctly...

[Full-disclosure] [ACSSEC-2005-11-27-0x2] Remote Overflows in Mailenable Enterprise 1.1 / Professional 1.7

Re: See-Security Research and Development "A remote buffer overflow exists in MailEnable Enterprise 1.1 IMAP EXAMINE command, which allows for post authentication code execution. This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch." -- There's a reason why the...

CVE-2005-4177

The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...