CVE-2005-0500
published 2005-05-02CVE-2005-0500: Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which…
PriorityP419medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
10.75%
95.3th percentile
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | ie | — | — |
| microsoft | internet_explorer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2006-7176 sendmail allows external mail with from address [email protected]
bugzilla·2007-05-01·CVSS 4.3
CVE-2006-7176 [MEDIUM] CVE-2006-7176 sendmail allows external mail with from address [email protected]
CVE-2006-7176 sendmail allows external mail with from address [email protected]
+++ This bug was initially created as a clone of Bug #171838 +++
Description of problem:
When an external SMTP session is established, and an address of
"[email protected]" is specified on the MAIL FROM: line, sendmail
blindly accepts this as valid. Note that "xxx@localhost" is rejected by
sendmail.
Version-Release number of selected component (if applicable):
sendmail-8.13.1-2
How reproducible:
Always
Steps to Reproduce:
1. from a remote host, telnet host 25
2. EHLO foobar.redhat.com
3. MAIL FROM:
Actual results:
220 vaccine1.NoDak.edu ESMTP Sendmail 8.13.1/8.13.1; Wed, 26 Oct 2005 16:17:42 -
0500
EHLO nate.cc.ndsu.nodak.edu
250-vaccine1.NoDak.edu Hello nate.cc.ndsu.NoDak.edu [134.129.106
Bugzilla
CVE-2005-2933 imap buffer overflow
bugzilla·2006-03-05·CVSS 7.5
CVE-2005-2933 [HIGH] CVE-2005-2933 imap buffer overflow
CVE-2005-2933 imap buffer overflow
Remote exploitation of a buffer overflow vulnerability in the University
of Washington's IMAP Server (UW-IMAP) allows attackers to execute
arbitrary code. (quote from iDefense advisory, see
http://www.idefense.com/intelligence/vulnerabilities/display.php?type=vulnerabilities&id=313)
All versions of imap < imap-2004g are affected. This includes RHL 7.3, RHL 9,
and probably most FC versions.
RH used the following patch to fix the issue in RHEL 2.1:
--snip--
Fix for CAN-2005-2933, from iDefense's advisory.
diff -uNr imap-2001a/src/c-client/mail.c imap-2004g/src/c-client/mail.c
--- imap-2001a/src/c-client/mail.c 2001-11-13 14:29:07.000000000 -0500
+++ imap-2004g/src/c-client/mail.c 2005-09-15 12:57:07.000000000 -0400
@@ -587,8 +587,10 @@
if (c == '=') { /
http://marc.info/?l=full-disclosure&m=110895997201027&w=2http://secunia.com/advisories/14335http://www.securityfocus.com/bid/12602https://exchange.xforce.ibmcloud.com/vulnerabilities/19452http://marc.info/?l=full-disclosure&m=110895997201027&w=2http://secunia.com/advisories/14335http://www.securityfocus.com/bid/12602https://exchange.xforce.ibmcloud.com/vulnerabilities/19452
2005-05-02
Published