309 matches found
Microsoft Exchange Base64 MIME消息远程代码执行漏洞（MS07-026）
Microsoft Exchange Server是一款企业级的邮件服务程序。 Microsoft Exchange Server处理特定的畸形编码数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Microsoft Exchange没有正确地解码base64编码的内容，如果用户向服务器发送了特制的base64编码的MIME邮件消息的话，就可能导致执行任意指令。 Microsoft Exchange Server 2007 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1 Microsoft...
CVE-2003-1095
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...
CVE-2005-0579
nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...
SQL Server Cleartext 'sa' Account 'NULL' Password Authentication (deprecated)
Binary data 1121.prm...
Microsoft RVP protocol weakness
Leak of server authentication allows variety of Man-In-The-Middle attacks...
OpenSSH contains a one-off overflow of an array in the channel handling code
Overview OpenSSH is a program used to provide secure connection and communications between client and servers. Channels are used to segregate differing traffic between the client and the server. Description OpenSSH versions 2.0 - 3.0.2 contain a one-off overflow of an array in the code that handl...
new vulnerability in Netscape effectively disables SSL server auth
-----BEGIN PGP SIGNED MESSAGE----- Introduction ============ This vulnerability defeats SSL server authentication in Netscape 4.73 and earlier versions. This is a new vulnerability unrelated to CERT advisory 2000-5. However, it has a similar devastating effect: destroying SSL server authenticatio...