CVE-2002-1741

CVE-2002-1741 describes a directory traversal vulnerability in WorldClient.cgi within WorldClient for Alt-N Technologies MDaemon

CVE-2002-1733

Technical details are not publicly available in the provided documents for CVE-2002-1733. Monitor for updates; no confirmed affected products, versions, or fixes are specified in the supplied sources.

CVE-2002-1739

Alt-N Technologies Mdaemon versions 5.0–5.0.6 store user passwords with a weak encryption algorithm, enabling local users to crack them. Local access is required; confidentiality impact is indicated. Remediation: upgrade to a version that uses stronger password encryption. The connected PT-securi...

CVE-2002-1740

Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name NewFolder parameter...

CVE-2002-1739

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords...

CVE-2002-1733

Cross-site scripting XSS vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post...

CVE-2002-1738

Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email...

CVE-2002-1740

The CVE-2002-1740 entry describes a buffer overflow in WorldClient.cgi (WorldClient) of Alt-N Technologies MDaemon

CVE-2002-1738

CVE-2002-1738 affects Alt-N Technologies MDaemon 5.0.5.0 and earlier. The issue is that a default MDaemon mail account is created with the password “MServer,” which could allow remote attackers to send anonymous email. The available sources describe the affected product and the default credential...

CVE-2002-1738: Undefined Security Weakness

Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email...

CVE-2002-1733: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post...

Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability

Security advisory. Kaspersky antivirus v. 5.0.227, 5.0.228, 5.0.335 under Windows2000. There is nothing found under Windows XP. There is Windows2000 security subsystem breakout found inside Kaspersky antivirus v. 5.0.227, 5.0.228, 5.0.335. It is possible to exploit it with local privilege...

Уязвимость в KAV.

Уведомление безопасности. Антивирус Касперского версий 5.0.227, 5.0.228 и 5.0.335 под Windows2000. В Windows XP ничего нижеописанного не найдено. В антивирусе Касперского версии 5.0.227, 5.0.228 в составе Kaspersky Personal Security Suite и 5.0.335,работающими под операционной системой Windows200...

PicoWebServer Remote Unicode Stack Overflow

Title: PicoWebServer Remote Unicode Stack Overflow Release Date: 28. May 2005 Author: Dennis Elser dennis backtrace de Vendor: Newmad Technologies http://www.newmad.se Vendor Status: Contacted Product: PicoWebServer Affected Version: 1.0 Platform: Microsoft Windows CE / PocketPC Processor Type: A...

CVE-2005-1599

The CVE-2005-1599 entry describes a cross-site scripting (XSS) flaw in Kryloff Technologies Subject Search Server (SSServer) 1.1, exploitable via the "Search For" field to inject arbitrary web script/HTML. The NVD/CVE records show a MEDIUM risk (CVSSv2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base 4.3) but n...

CVE-2005-1599

Cross-site scripting XSS vulnerability in Kryloff Technologies Subject Search Server SSServer 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field...

CVE-2005-1599

Cross-site scripting XSS vulnerability in Kryloff Technologies Subject Search Server SSServer 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field...

CVE-2005-1599: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Kryloff Technologies Subject Search Server SSServer 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field...

[Full-disclosure] [SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow

Advisory Name: Ethereal 0.10.10 SIP Dissector Overflow Release Date: 05/07/05 Application: Ethereal 0.10.10 and Prior Platform: Multiple Severity: A remote attacker can execute arbitrary commands Author: Ejovi Nuwere ejoviATsecuritylab.net Vendor Status: Vendor has published patch Reference:...

[SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow

Advisory Name: Ethereal 0.10.10 SIP Dissector Overflow Release Date: 05/07/05 Application: Ethereal 0.10.10 and Prior Platform: Multiple Severity: A remote attacker can execute arbitrary commands Author: Ejovi Nuwere ejoviATsecuritylab.net Vendor Status: Vendor has published patch Reference:...