Unauthorized JavaMail mail server API mailbox access updated since 20.05.2005
Published:		25.05.2005
Source:		BUGTRAQ
SecurityVulns ID:		4810
Type:		library
Level:		5/10
Description:		It's possible to access different mailbox by mail number.

Affected:		SUN : JavaMail 1.3
		SOLSTICE : Solstice Internet Mail Server POP3 2.0

Original document		Ricky Latt, Javamail Multiple Information Disclosure Vulnerabilities (25.05.2005)
		Ricky Latt, JavaMail Information Disclosure (msgno) (20.05.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple IPSwitch IMail vulnerabilitiles
Published:		25.05.2005
Source:		BUGTRAQ
SecurityVulns ID:		4822
Type:		remote
Level:		6/10
Description:		Multiple buffer overflows, directory traversals, DoS.

Affected:

IPSWITCH : IMail 8.13

Original document		IDEFENSE, iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability (25.05.2005)
		IDEFENSE, iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability (25.05.2005)
		IDEFENSE, iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities (25.05.2005)
		IDEFENSE, iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LSUB DoS Vulnerability (25.05.2005)
		IDEFENSE, iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability (25.05.2005)

Files:		IpSwitch IMAP Server LOGON stack overflow PoC
		IpSwitch IMAIL Server IMAPD Remote r00t Exploit by kcope
Discuss:		Read or add your comments to this news (0 comments)

ibsh Iron Bars SHell Format String Vulnerability format string bug
Published:		25.05.2005
Source:		SECUNIA
SecurityVulns ID:		4825
Type:		local
Level:		5/10
Description:		Format string bug allows restricted shell escaping.

Affected:

IBSH : ibsh 0.3

Original document

SECUNIA, [SA15473] Iron Bars SHell Format String Vulnerability (25.05.2005)

Discuss:

Read or add your comments to this news (0 comments)

Cisco equipment DNS DoS
Published:		25.05.2005
Source:		SECUNIA
SecurityVulns ID:		4826
Type:		remote
Level:		5/10
Description:		Failure in compressed DNS packets parsing.

Affected:		CISCO : CISCO 7902
		CISCO : Cisco 7905
		CISCO : CISCO 7912
		CISCO : Cisco 500
		CISCO : Cisco 7300
		CISCO : Cisco Content Router 4400
		CISCO : Cisco Content Distribution Manager 4600
		CISCO : Cisco Content Engine Module

Original document

SECUNIA, [SA15472] Cisco Various Products Compressed DNS Messages Denial of Service (25.05.2005)

Discuss:

Read or add your comments to this news (0 comments)

Bea Weblogic application server Server Console crossite scripting updated since 25.05.2005
Published:		28.05.2005
Source:		BUGTRAQ
SecurityVulns ID:		4823
Type:		remote
Level:		5/10
Description:		Crossite scripting; no session cookie timeout is implemented.

Affected:

BEA : Weblogic 8.1

Original document		SHATTER, [AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability (28.05.2005)
		SHATTER, [AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability (28.05.2005)
		ACROS Security, ACROS Security: HTML Injection in BEA WebLogic Server Console (1) (25.05.2005)
		ACROS Security, ACROS Security: HTML Injection in BEA WebLogic Server Console (2) (25.05.2005)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Halo: Combat Evolved game DoS updated since 25.05.2005
Published:		07.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		4824
Type:		remote
Level:		5/10
Description:		Endless loop on malformed data.

Affected:		MICROSOFT : Halo: Combat Evolved 1.06
		MICROSOFT : Halo: Combat Evolved 1.07

Original document		Luigi Auriemma, Endless loop and resources consumption in Halo 1.0.7.0615 (07.08.2008)
		Luigi Auriemma, Endless loop in Halo 1.07 (01.07.2008)
		Luigi Auriemma, Endless loop in Halo 1.06 (25.05.2005)

Files:		Exploits Halo <= 1.07.615 (before 30 Jul 2008) resources consumption
		Exploits Halo <= 1.07 endless loop
		Halo <= 1.0.7.615 (before 30 Jul 2008) endless loop
		Halo <= 1.06 endless loop
Discuss:		Read or add your comments to this news (0 comments)