cisco unity server 3.2 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote malicious users to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

Cisco Unity Server 3.1 Cisco Unity Server 3.2 Cisco Unity Server 2.4 Cisco Unity Server 2.46 Cisco Unity Server 3.0 Cisco Unity Server 2.2 Cisco Unity Server 2.3 Cisco Unity Server 2.0 Cisco Unity Server 2.1 Cisco Unity Server 3.3 Cisco Unity Server 4.0

5

CVSSv2

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote malicious users to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard late...

1 EDB exploit

7.5

CVSSv2

Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via long file names.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote malicious users to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows malicious users to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

5

CVSSv2

The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote malicious users to cause a denial of service (crash) when t...

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

5

CVSSv2

The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.

Microsoft Internet Information Services 5.0 Microsoft Internet Information Server 4.0

7.5

CVSSv2

Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote malicious users to embed scripts into another user's session.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote malicious users to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows malicious users to cause a denial of service or execute arbitrary code.

Microsoft Internet Information Services 5.0 Microsoft Internet Information Server 4.0

4 EDB exploits

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook