Mozilla Thunderbird多个拒绝服务漏洞

BUGTRAQ ID: 38831 CVECAN ID: CVE-2010-0161,CVE-2010-0163 Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 如果将Thunderbird客户端配置为使用calmail.berkeley.edu（在这种情况下会对SSL/TLS连接广播 AUTH=GSSAPI），运行在Vista或Windows 7平台上的Thunderbird在加入到AD期间试图使用SSPI时就会崩溃。默认下Thunderbird 2在SMTP期间总会试图使用SSPI。...

CVE-2010-0161

CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...

Solaris Update for uucp 113322-03

Check for the Version of uucp OpenVAS Vulnerability Test Solaris Update for uucp 113322-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Solaris Update for uucp 111571-04

Check for the Version of uucp OpenVAS Vulnerability Test Solaris Update for uucp 111571-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

CVE-2009-0161

CVE-2009-0161 affects Apple Mac OS X 10.5 before 10.5.7, specifically the Ruby OpenSSL OCSP module. The issue stems from incomplete error checking in OpenSSL’s OCSP handling, which may cause an invalid OCSP response to be treated as valid, potentially allowing certificate spoofing via a revoked c...

CentOS Update for cups CESA-2008:0161 centos5 x86_64

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0161 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for cups CESA-2008:0161 centos5 x86_64

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0161 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Gentoo Security Advisory GLSA 200502-32 (unace)

The remote host is missing updates announced in advisory GLSA 200502-32. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200511-10 (rar)

The remote host is missing updates announced in advisory GLSA 200511-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200502-32 (unace)

The remote host is missing updates announced in advisory GLSA 200502-32. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 278-1 (sendmail)

The remote host is missing an update to sendmail announced via advisory DSA 278-1. OpenVAS Vulnerability Test $Id: deb2781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 278-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0161

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2007-0161

The CVE-2007-0161 entry concerns the HP PML Driver HPZ12 (HPZipm12.exe) used in HP all‑in‑one drivers. It states that insecure SERVICE_CHANGE_CONFIG DACL permissions on the driver allow a local user to gain privileges and run arbitrary programs by modifying the binpath, a scenario related to CVE-...

CVE-2007-0161

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2006-0161

Technical details about CVE-2006-0161 are not provided in the connected documents. The initial description notes uncertainty; no affected versions, impact, or remediation are specified here. Monitor for updates.

CVE-2001-0161

The CVE-2001-0161 entry concerns Cisco 340-series Aironet access points running firmware 11.01. The vulnerability arises because the device does not use 6 of the 24 available IV bits in WEP, which makes it easier for remote attackers to perform brute-force attacks. The provided documents confirm ...

CVE-2005-0161

CVE-2005-0161 concerns unace 1.2b, with confirmed issues in multiple advisories. The vulnerability allows directory traversal via ACE archives containing sequences such as "../" or absolute pathnames, potentially enabling overwriting arbitrary files. Some sources also describe buffer overflows du...

CVE-2004-0161

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients...

Debian DSA-278-1 : sendmail - char-to-int conversion

Michal Zalewski discovered a buffer overflow, triggered by a char to int conversion, in the address parsing code in sendmail, a widely used powerful, efficient, and scalable mail transport agent. This problem is potentially remotely exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2004-0161

The CVE-2004-0161 issue affects multiple content security gateway and antivirus products. The vulnerability allows remote attackers to bypass content restrictions by sending MIME messages encoded with RFC2231, which can be interpreted differently by mail clients. The NVD entry shows a base CVSS v...