Mandrake Linux Security Advisory : pcre (MDKSA-2007:212)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

CVE-1999-1591

Microsoft IIS 4.0 SP4, without certain hotfixes for SP4, can bypass authentication under certain conditions, enabling remote attackers to access resources without credentials. Demonstrated via Visual InterDev 6.0. The Red Hat and CVE listings corroborate this description. Practical impact per ava...

Citrix Presentation/MetaFrame Server cpprov.dll畸形参数栈缓冲区溢出漏洞

Citrix Presentation Server允许用户通过网络远程访问应用程序。 Citrix Presentation Server的打印提供程序（ccprov.dll）在处理传送给EnumPrintersW和OpenPrinter函数的参数时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者能够通过本地API调用或RPC请求向OpenPrinter传送超过130字节的超长字符串做为其第一个参数的话，就可以触发这个溢出，导致在本地系统环境中执行任意代码。 Citrix MetaFrame XP 1.0 Citrix Presentation Server...

CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

Cumulative Patch for Internet Information Services (Q327696)

Cumulative Patch for Microsoft IIS Q327696 Impact of vulnerability: Ten new vulnerabilities, the most serious of which could enable code of an attacker's choice to be run on a server. Recommendation: Users using any of the affected products should install the patch immediately. Maximum Severity...

CVE-2004-2375

Vulnerability CVE-2004-2375 affects the POP3 server in 1st Class Mail Server 4.0. A buffer overflow can be triggered by an APOP USER command with an excessively long second parameter (digest), potentially causing a denial of service and possibly allowing arbitrary code execution. Documented in CV...

CVE-2002-1849

ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with...

CVE-2005-0768

Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...

CVE-2005-0314

The CVE-2005-0314 entry describes a Cross-site Scripting (XSS) vulnerability in the Magic Winmail Server 4.0 Build 1112, specifically in user.php, where remote attackers can inject arbitrary web script or HTML through personal information fields. The connected records corroborate the same vulnera...

CVE-2004-0574

CVE-2004-0574 affects the NNTP component in Windows NT 4.0 Server, Windows 2000 Server, Windows Server 2003, Exchange 2000/2003, enabling remote code execution via XPAT pattern handling. The issue stems from improper length validation and unchecked buffers, leading to off-by-one and heap-based ov...

CVE-2003-0807

CVE-2003-0807 : A denial-of-service vulnerability in Microsoft Windows where the COM Internet Services (CIS) and RPC over HTTP Proxy components can be overwhelmed by a crafted forwarded response, causing the backend to stop accepting requests. Related connected documents (MS04-012) identify this ...

1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

CVE-2002-0787

The CVE-2002-0787 entry describes a cross-site scripting vulnerability in the iCon administrative web server for Critical Path inJoin Directory Server 4.0. The issue arises from reflected XSS via modified administrator URLs using the LOCID or OC parameters, allowing remote attackers to execute sc...

CVE-1999-0924

The CVE-1999-0924 entry concerns ColdFusion Server 4.0, where the Syntax Checker component is the vulnerable element. The issue enables remote denial of service. The connected documents reiterate the same description and do not provide explicit exploit vectors, affected build numbers beyond “4.0,...

CVE-1999-0923

CVE-1999-0923 affects ColdFusion Server 4.0 through sample runnable code snippets that allow remote attackers to read files, cause a denial of service, or use the server as a proxy for other HTTP calls. The description indicates impact on confidentiality, integrity, and availability (partial C/I/...

reboot.ini-passwds.txt

Date: Fri, 12 Feb 1999 14:34:17 -0800 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-005 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...