Searching mms software vulnerabilities

The installation of Tumbleweed Messaging Manage

installation | Management | Tumbleweed | Messaging | System |

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.


The "sa" account is installed with a default nu

installed | password | default | account | null | "sa" |

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.


Multiple heap-based buffer overflows in the cod

heap-based | overflows | Multiple | handle | buffer | used | code |

Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.


Buffer overflow in the mms_interp_header functi

mms_interp_header | function | overflow | Ripper | before | Buffer | mmsc | MMS |

Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams.


Multiple buffer overflows in ArcSoft MMS Compos

overflows | Multiple | Composer | ArcSoft | buffer | MMS |

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.


ArcSoft MMS Composer 1.5.5.6 and possibly earli

Composer | ArcSoft | MMS |

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service (resource exhaustion and application crash) via WAPPush messages to UDP port UDP 2948.


The SISCO OSI stack, as used in SISCO MMS-EASE,

applications | attackers | MMS-EASE | possibly | control | service | Toolkit | denial | system | remote | allows | SISCO | AX-S4 | stack | cause | other | ICCP | used | MMS | OSI |

The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service (application termination and restart) via malformed packets.


Wireshark before 0.99.6 allows remote attackers

Wireshark | before |

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.


Software vulnerabilities results 1 to 9 of 9     
Page: 1