Windows XP SP2 dangerous content filtering protection bypass

Comment in predefined format causes content to bypass protection...

CVE-2004-0839

CVE-2004-0839 is the IE Drag-and-Drop Vulnerability. The connected docs show it as a publicly disclosed CAN-2005-0053 vulnerability, which was addressed by Microsoft security updates MS05-014 and related MS05-008. The vulnerability arises from Internet Explorer handling drag-and-drop events, allo...

CVE-2004-0829

smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service daemon crash by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2...

CVE-2004-0829

The provided connected documents confirm CVE-2004-0829 is a DoS vulnerability in Samba prior to 2.2.11, where sending a FindNextPrintChangeNotify without a preceding FindFirstPrintChangeNotify can crash the daemon (as demonstrated by the Windows XP SP2 SMB client). Affected product: Samba (before...

CVE-2002-1413

The CVE-2002-1413 issue concerns Novell Netware RCONAG6 (SP2). When RconJ runs in secure mode, using the Secure IP (SSL) option can allow a remote attacker to bypass authentication due to a failure to validate the user password, potentially granting unauthorized access. The CERT entry (VU-746251)...

CVE-2004-0712

BEA WebLogic Server 8.1 through SP2: The configuration tools (Unix config.sh and Windows config.cmd) create a log file that stores the administrative username and password in cleartext, enabling local privilege escalation. Affected component: WebLogic Server configuration tooling. Root cause: cre...

CVE-2004-0322

Affected software: XMB 1.8 Final SP2. Vulnerability type: multiple cross-site scripting (XSS). Root cause / vectors: manipulation of input parameters and HTML attributes that allow script execution, including (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user paramete...

CVE-2004-0322

Multiple cross-site scripting XSS vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the 1 member parameter in member.php, 2 uid parameter in u2uadmin.php, 3 user parameter in editprofile.php, 4 an onmouseover event in an align tag when bbco...

NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963651 Title: iManager eMFrame Buffer Overflow Date: 08-Oct-2002 Revision: Updates NOVL-2002-2963081 Product Name: iManager eMFra...

CVE-2002-0982

Microsoft SQL Server 2000 SP2 (when configured as a distributor) is exposed to an arbitrary code execution vulnerability through the @scriptfile parameter of the sp_MScopyscript stored procedure. The CVE-2002-0982 entry documents this as a high-severity issue (CVSS v2 base score 7.5) with network...

mozillaftp.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 + Title: Mozilla FTP View Cross-Site Scripting Vulnerability + Date: 4 August 2002 + Author: Eiji James Yoshida [email protected] + Risk: Medium + Vulnerable: Windows2000 SP2 Mozilla 1.0 + Not vulnerable: Windows2000 SP2 Mozilla 1.1 Beta +...

CVE-1999-1488

The CVE-1999-1488 entry concerns the sdrd daemon in IBM SP2 System Data Repository (SDR), where the service allows remote reading of files without authentication. The description indicates unauthenticated access enabling potentially disclosure of data via a network vector; no concrete exploit ste...

CVE-1999-1316

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...

CVE-1999-1488

sdrd daemon in IBM SP2 System Data Repository SDR allows remote attackers to read files without authentication...

CVE-1999-1316

Affected product: Windows NT SP2 with Passfilt.dll. Description states that Passfilt.dll allows users to create a password containing the user’s name, which could make it easier for an attacker to guess. The material provided does not specify affected build numbers beyond SP2 or any explicit reme...

CVE-1999-1387

The CVE describes a remote denial-of-service in Windows NT 4.0 SP2 caused by malformed SMB inputs/packets (e.g., a Linux smbmount-generated packet) that can crash the system when executed on an older kernel. Affected software: Windows NT 4.0 SP2. Root cause: improper handling of crafted inputs le...

CVE-1999-1521

Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server...

CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows 1 remote authenticated users to overwrite arbitrary files ending in '.log', or 2 local users to overwrite arbitrary files via...

Check Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit

Exploit for unknown platform in category remote exploits ================================================================ Check Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit ================================================================ / Summary A vulnerability exists in Check Poi...

CVE-1999-1488

sdrd daemon in IBM SP2 System Data Repository SDR allows remote attackers to read files without authentication...