[SECURITY] [DSA 662-2] New squirrelmail package fixes regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-2 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1719

Merak Webmail Server 5.2.7 (and Merak Webmail/IceWarp Web Mail

CVE-2004-1719

Multiple cross-site scripting XSS vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 category, 2 cserver, 3 ext, 4 global, 5 showgroups, 6 or showlite parameters to address.html, or the 7 spage or 8 autoresponder parameters to...

CVE-2004-1719: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 category, 2 cserver, 3 ext, 4 global, 5 showgroups, 6 or showlite parameters to address.html, or the 7 spage or 8 autoresponder parameters to...

CVE-2004-1501

The CVE-2004-1501 entry concerns the webmail service in Lan Suite 602, versions up to 2004.0.04.0909 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value and then disconnecting ...

CVE-2004-1501

The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service CPU and memory consumption by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data...

CVE-2004-1501: Undefined Security Weakness

The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service CPU and memory consumption by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data...

Open WebMail openwebmail.pl logindomain Parameter XSS

The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script code in the context of a user's web browser. %NASLMINLEVEL 70300 This script was writte...

security flaw

Cross-site scripting XSS vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables...

security flaw

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0445

Open WebMail 2.x is affected by a Cross-Site Scripting (XSS) vulnerability in the logindomain parameter on the login page. The Open WebMail OpenVAS/Nessus entries confirm that insufficient validation of the logindomain input enables arbitrary script execution in a user’s browser. Related referenc...

CVE-2005-0445

Cross-site scripting XSS vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter logindomain in the login page...

CVE-2005-0445: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter logindomain in the login page...

[SA14253] Open WebMail Login Page Cross-Site Scripting Vulnerability

TITLE: Open WebMail Login Page Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA14253 VERIFY ADVISORY: http://secunia.com/advisories/14253/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Open WebMail 2.x http://secunia.com/product/3167/ DESCRIPTION: Ori...

security flaw

Cross-site scripting XSS vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables...

CVE-2005-0324

CVE-2005-0324 affects Infinite Mobile Delivery Webmail 2.6. The issue allows remote attackers to gain sensitive information by sending an HTTP request containing invalid characters for a Windows folder name, causing an error message that reveals the path. This is a path disclosure vulnerability w...

CVE-2005-0323

Cross-site scripting XSS vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2005-0323

CVE-2005-0323 affects Infinite Mobile Delivery Webmail 2.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the URL, enabling potential credential theft or session manipulation. The issue is documented in multiple sour...

CVE-2005-0324

Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message...

CVE-2005-0324: Undefined Security Weakness

Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message...