OSVDB: The Open Source Vulnerability Database

Creditee: CIRT.DK

Known Contact Information:

(as of 2006-04-13)
(as of 2006-10-02)
(as of 2007-09-20)

Known Affiliations:

Zero Day Initiative (ZDI) (as of 2006-04-13)
iDefense Labs VCP (as of 2006-10-02)

Disclosed Vulnerabilities (11):

Disc. Date	OSVDB ID	CVEID	Title
2007-09-20	45906	2007-4991	Microsoft ISA Server SOCKS4 Proxy Empty Packet Cross Session Destination IP Disclosure
2007-06-01	36102	2007-1593	Symantec Veritas Storage Foundation Veritas Volume Replicator (VVR) Crafted Packet Remote DoS
2007-04-17	35020	2007-2137	IBM Tivoli Monitoring Express kde.dll Remote Overflow
2007-04-04	34627	2007-2343	Enterasys Networks Multiple Products TFTPD Filename Handling Remote Overflow
2007-04-04	34628	2007-2344	Enterasys Networks Multiple Products BOOTPD Crafted UDP Packet Remote DoS
2006-12-23	31360	2006-6761	Novell NetMail IMAP Daemon (IMAPD) SUBSCRIBE Command Remote Overflow
2006-12-23	31361	2006-6762	Novell NetMail IMAP Daemon (IMAPD) APPEND Command DoS
2006-10-31	29997	2006-4517	Novell iManager Tomcat HTTP POSTS TREE Variable DoS
2006-10-02	29486	2006-4511	Novell GroupWise Messenger Agents nmma.exe Crafted HTTP POST DoS
2006-05-22	25781	2006-2496	Novell eDirectory / iMonitor NDS Server URI Overflow
2006-04-13	24617	2006-0992	Novell GroupWise Messenging Agent Accept-Language Header Remote Overflow

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.