IMP Content-Type Header XSS

The remote server is running at least one instance of IMP whose version number is between 2.0 and 3.2.3 inclusive. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary JavaScript code simply by reading a MIME messa...

CVE-2001-0501

CVE-2001-0501 affects Microsoft Word (Word 2002 and earlier). The vulnerability arises from failure to reliably detect macros embedded in malformed Word documents, allowing a document author to execute arbitrary commands as the user who opens the document even if macro security is set to higher l...

CVE-1999-1168

install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...

install.iss.txt

Date: Sat, 20 Feb 1999 20:59:23 -0500 From: Fyodor To: [email protected] Subject: ISS install.iss security hole Today I downloade the latest trial version of Internet Security Scanner for Linux version 5.3. The install program shell script requires that you be root, even if you want to install...

CVE-1999-1168

install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...