CVE-2002-2121

SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service crash via a long SMTP 1 HELO or 2 RCPT TO command, possibly due to a buffer overflow...

CVE-2002-2121

CVE-2002-2121 affects SurfControl SuperScout Email filter for SMTP 3.5.1. The vulnerability allows a remote attacker to cause a denial-of-service crash by sending excessively long SMTP commands (HELO or RCPT TO), likely due to a buffer overflow. Exploit details and a concrete remediation are not ...

CVE-2002-2121: Undefined Security Weakness

SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service crash via a long SMTP 1 HELO or 2 RCPT TO command, possibly due to a buffer overflow...

CVE-2001-1465

CVE-2001-1465 affects SurfControl SuperScout. The issue is in the packet-filtering logic that only filters packets containing both an HTTP GET request and a Host header; an attacker can bypass filtering by fragmenting traffic so that no single packet contains both elements. This is a local-access...

CVE-2001-1465

SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...

CVE-2001-1465: Undefined Security Weakness

SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...

CVE-2002-1530

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form...

CVE-2002-1529

CVE-2002-1529 describes a cross-site scripting (XSS) vulnerability in the administrative web interface (STEMWADM) of SurfControl SuperScout Email Filter. The flaw arises in the msgError.asp page, where an attacker can inject arbitrary script or HTML through the Reason parameter. The available doc...

CVE-2002-1529

Cross-site scripting XSS vulnerability in msgError.asp for the administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter...

CVE-2002-1531

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service crash via an HTTP request without a Content-Length parameter...

CVE-2002-1531

The CVE concerns SurfControl SuperScout Email Filter’s administrative web interface (STEMWADM). A vulnerability allows remote attackers to trigger a denial of service (crash) by sending an HTTP request without a Content-Length header. Impact is limited to Availability (PARTIAL) per the NVD scorin...

CVE-2002-1532

The CVE-2002-1532 affects the admin web interface (STEMWADM) of SurfControl SuperScout Email Filter. A remote attacker can trigger a denial of service (resource exhaustion) by issuing a GET request lacking the terminating CRLF sequence, causing the interface to wait for the sequence and blocking ...

CVE-2002-1530

The CVE concerns SurfControl SuperScout Email Filter, specifically its administrative web interface STEMWADM. A vulnerability in the userlist.asp page allows an attacker to retrieve usernames and plaintext passwords via the user editing form, exposing credential data through the management UI. Th...

CVE-2002-1529: Undefined Security Weakness

Cross-site scripting XSS vulnerability in msgError.asp for the administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter...

CVE-2002-1531: Undefined Security Weakness

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service crash via an HTTP request without a Content-Length parameter...

CVE-2002-1532: Undefined Security Weakness

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service resource exhaustion via a GET request without the terminating /r/n/r/n CRLF sequence, which causes the interface to wait for the sequence and blocks other users...

CVE-2002-1530: Undefined Security Weakness

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form...

SurfControl Web Filter for Microsoft ISA Server Vulnerability

SurfControl Web Filter for Microsoft ISA Server Vulnerability Package: SurfControl Web Filter for Microsoft ISA Vendor Web Site: http://www.surfcontrol.com Version: 4.2.0.21 Platforms: Windows 2000 Server Local: No Remote: Yes Fix Available: No recommended steps listed below Vendor Contacted:...

SurfControl Web Filter directory traversal

Directory traversal in web interface TCP/8888...

CVE-2002-1529

Cross-site scripting XSS vulnerability in msgError.asp for the administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter...