CVE-2003-1328
published 2003-02-19CVE-2003-1328: The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass…
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
38.93%
98.4th percentile
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | ie | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow
exploitdb·2003-05-06
CVE-2003-0263 FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow
FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow
---
source: https://www.securityfocus.com/bid/7506/info
A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From' arguments. Due to the nature of this vulnerability it may be exploited to execute attacker-supplied code with the privileges of the SYSTEM user.
This vulnerability was reported for FTGate PRO 1.22 Hotfix(1328). It is likely that previous versions are also affected.
#!/usr/bin/perl -w
##################
# FTGate Pro Mail Server v. 1.22 (1328) DoS attack
#
# URL: http://www.infowarfare.dk/
# EMAIL: [email protected]
# USAGE: sploit.pl
#
# Summary:
#
# The problem is a Buffer Overflow in the
Exploit-DB
FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow
exploitdb·2003-05-06
CVE-2003-0263 FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow
FloosieTek FTGate PRO 1.22 - SMTP RCPT TO Buffer Overflow
---
source: https://www.securityfocus.com/bid/7508/info
A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Rcpt To' arguments. Due to the nature of this vulnerability it may be exploited to execute attacker-supplied code with the privileges of the SYSTEM user.
This vulnerability was reported for FTGate PRO 1.22 Hotfix(1328). It is likely that previous versions are also affected.
#!/usr/bin/perl -w
##################
# FTGate Pro Mail Server v. 1.22 (1328) DoS attack
#
# URL: http://www.infowarfare.dk/
# EMAIL: [email protected]
# USAGE: sploit.pl
#
# Summary:
#
# The problem is a Buffer Overflow in the SMTP
Exploit-DB
Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution
exploitdb·2003-02-05
CVE-2003-1328 Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution
Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution
---
source: https://www.securityfocus.com/bid/6780/info
Microsoft Internet Explorer implements the showHelp() function as a means of displaying help content contained in HTML pages. However, this function is capable of performing too many other actions outside of its intended functionality through pluggable protocols. These actions could include reading files and executing commands on the vulnerable system.
Exploit 1:
// Sandblad advisory #11 - Read your google cookie
showHelp("file:");showHelp("http://www.google.com/");
showHelp("javascript:alert(document.cookie)");
Exploit 2:
// Sandblad advisory #11 - Read the file c:\test.txt
showHelp("file:");showHelp("res://shdoclc.dll/about.dlg");
showHelp("javascript:try{c=
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.htmlhttp://www.ciac.org/ciac/bulletins/n-038.shtmlhttp://www.iss.net/security_center/static/11259.phphttp://www.kb.cert.org/vuls/id/400577http://www.securityfocus.com/bid/6780https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.htmlhttp://www.ciac.org/ciac/bulletins/n-038.shtmlhttp://www.iss.net/security_center/static/11259.phphttp://www.kb.cert.org/vuls/id/400577http://www.securityfocus.com/bid/6780https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57
2003-02-19
Published