ISS multiple products SMB parsing buffer overflow
Published:		27.02.2004
Source:		X-FORCE
SecurityVulns ID:		3484
Type:		remote
Level:		6/10
Description:		Remote buffer overflow during SMB parsing leads to system account compromise.

Affected:		ISS : RealSecure 7.0
		ISS : RealSecure 3.6
		ISS : BlackIce 3.6
		ISS : Proventia A
		ISS : Proventia G
		ISS : Proventia M

Original document		EEYE, [Full-Disclosure] EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow (27.02.2004)
		X-FORCE, ISS Security Brief: Vulnerability in SMB Parsing in ISS Products (27.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Symantec Gateway Security crossite scripting
Published:		27.02.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3485
Type:		remote
Level:		5/10
Description:		Crossite scripting in web managment.

Affected:

SYMANTEC : Symantec Gateway Security 2.0

Original document

Brian_J_Soby_(at)_raytheon.com, [Full-Disclosure] Symantec Gateway Security Management Service Cross Site Scripting (27.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Extremail password weakness
Published:		27.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3486
Type:		remote
Level:		5/10
Description:		It's psosible to access without passwords if password begins with digit.

Affected:

EXTREMAIL : eXtremail 1.5

Original document

Andrey Smirnov, Extremail Security Problem (27.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Internet Explorer crossdomain keystrokes leak
Published:		27.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3487
Type:		client
Level:		5/10
Description:		Script from one site can access keystrokes send do another site.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document

IDEFENSE, iDEFENSE Security Advisory 02.27.04b: Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass (27.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

WinZIP mail format buffer overflow
Published:		27.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3488
Type:		client
Level:		5/10
Description:		Heap overflow on parsing different mail formats.

Affected:

WINZIP : WinZip 9.0

Original document

IDEFENSE, iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability (27.02.2004)

Files:		WinZip MIME Parsing Buffer Overflow Exploit
Discuss:		Read or add your comments to this news (0 comments)

Calife buffer overflow
Published:		27.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3489
Type:		local
Level:		5/10
Description:		Heap overflow on oversized password.

Affected:

CALIFE : calife 2.8

Original document

DownBload, Calife heap corrupt / potential local root exploit (27.02.2004)

Discuss:

Read or add your comments to this news (0 comments)