USN-582-1: Thunderbird vulnerabilities

It was discovered that Thunderbird did not properly set the size of a buffer when parsing an external-body MIME-type. If a user were to open a specially crafted email, an attacker could cause a denial of service via application crash or possibly execute arbitrary code as the user. CVE-2008-0304...

Mozilla Thunderbird MIME外部主体堆溢出漏洞

CVECAN ID: CVE-2008-0304 Thunderbird是Mozilla发布的邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Thunderbird在处理畸形格式的邮件数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Thunderbird没有正确地解析邮件中的external-body MIME类型，在计算所要分配堆缓冲区的字节数时没有为所要拷贝的数据保留足够的空间。如果用户受骗打开了恶意邮件消息的话，就可能最多覆盖3字节的缓冲区，导致执行任意指令。 Mozilla Thunderbird 2.0.0.9 临时解决方法：...

iDefense Security Advisory 02.26.08: Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability

iDefense Security Advisory 02.26.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 26, 2008 I. BACKGROUND Mozilla Thunderbird is an open source electronic mail client and news reader. Multipurpose Internet Message Extensions MIME is a standard that defines how non-text attachments and...

RHEL 4 / 5 : thunderbird (RHSA-2008:0105)

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 27th February 2008 The erratum text has been updated to include the...

CVE-2007-0304

The connected sources confirm a SQL injection vulnerability in MiNT Haber Sistemi 2.7 affecting duyuru.asp, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. Root cause is improper handling of user input in the SQL query within that script. The vulnerability ma...

CVE-2006-0304

The CVE-2006-0304 issue affects Dual DHCP DNS Server 1.0, where a buffer overflow in the DHCP options field allows remote attackers to trigger a denial of service (application crash) and may enable arbitrary code execution. The vulnerability is rooted in improper handling of DHCP options leading ...

CVE-2005-0304

CVE-2005-0304 describes a directory traversal in DivX Player 2.6 and earlier. A specially crafted ZIP file containing a skin allows a remote attacker to overwrite arbitrary files by using a .. in a filename, enabling possible partial availability impact as reflected in the CVSS score. The records...

CVE-2004-0304

SQL injection vulnerability in browseitems.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the SearchText parameter...

CVE-2004-0304

The CVE maps to WebStores 2000 (WebCortex WebStores 2000 6.0). A SQL injection vulnerability in browse_items.asp (and related details via browse_item_details.asp) allows remote attackers to manipulate the backend database through the Search_Text parameter, potentially enabling unauthorized access...

CVE-2003-0304

one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script...

CVE-2003-0304

one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script...

CVE-2003-0304

The CVE-2003-0304 entry concerns One||Zero Helpdesk 1.4 rc4, where remote attackers can create administrator accounts by directly invoking the Helpdesk Installation script (install.php). The vulnerability arises from improper handling of installation script execution, enabling privilege escalatio...

CVE-2002-0304

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request...

CVE-2002-0304

Lil HTTP Server 2.1 is affected by a path traversal vulnerability that lets remote attackers read password-protected files by including a /./ sequence in the HTTP request. The available documents confirm the affected product and the vulnerable behavior but do not provide details on attacker explo...

Resin Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending /../../ to the file name. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10656; scriptversion"1.26"; scriptcvsdate"Date: 2018/07/27 18:38:15"; scriptcveid"CVE-2001-0304"; scriptbugtraqid2384;...

CVE-2001-0304

Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a ".." dot dot in a URL request...

CVE-2001-0304

CVE-2001-0304 affects Caucho Resin 1.2.2 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files by sending a URL containing a ..? path component. The issue arises from handling of dot-dot sequences in requests, enabling potential exposure of sensitive file...

CVE-2000-0304

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability...

CVE-2000-0304

Summary: CVE-2000-0304 affects Microsoft IIS 4.0 and 5.0 when the IISADMPWD virtual directory is installed. A malformed request to inetinfo.exe (the undelimited .HTR request) can cause a remote denial of service. What is affected: IIS 4.0 and, to a lesser extent, IIS 5.0; presence of IISADMPWD is...

CVE-1999-0304

CVE-1999-0304 concerns the BSD mmap vulnerability where local attackers in the kmem group can modify kernel memory via devices. The connected sources repeat the description but do not provide concrete product versions, patches, or specific exploit details. The Red Hat, CVE, NVD, and related entri...