24 results (0.004 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

12 Aug 2005 — The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory. • http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb42216xml •

CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 0

31 Dec 2002 — Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload. • http://www.kb.cert.org/vuls/id/287771 •

CVSS: 7.5EPSS: 2%CPEs: 11EXPL: 0

14 Sep 2002 — SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type... • http://archives.neohapsis.com/archives/bugtraq/2002-09/0134.html •

CVSS: 5.3EPSS: 1%CPEs: 1EXPL: 0

03 May 2002 — PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire. PGP Security PGPfire 7.1 para Windows altera la pila TCP/IP del sistema y modifica paquetes en los mensajes ICMP de error de un modo que permite a atacantes remotos saber que el sistema esta ejecutando PGPfire. • http://online.securityfocus.com/archive/1/252407 • CWE-203: Observable Discrepancy •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

31 Dec 2001 — NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments. • http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html •

CVSS: 9.8EPSS: 9%CPEs: 15EXPL: 0

04 Sep 2001 — Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message. • ftp://patches.sgi.com/support/free/security/advisories/20011104-01-I • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 3

19 Dec 2000 — McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field. • https://www.exploit-db.com/exploits/20432 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2

19 Dec 2000 — McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment. • http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html •

CVSS: 10.0EPSS: 2%CPEs: 1EXPL: 2

19 Dec 2000 — Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name. • http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html •

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1

19 Dec 2000 — NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords. • http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html •