ESA-2011-003: EMC NetWorker librpc.dll spoofing vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-003: EMC NetWorker librpc.dll spoofing vulnerability. EMC Identifier: ESA-2011-003 CVE Identifier: CVE-2011-0321 Severity Rating: CVSS v2 Base Score: 8.5 AV:N/AC:L/Au:N/C:P/I:N/A:C Affected products: EMC NetWorker earlier than 7.5.3.5 EMC...

CVE-2010-0321

CVE-2010-0321 affects Jamit Job Board 3.0, where the vulnerability is a stored/reflected XSS in jobs/index.php via the post_id parameter. The issue allows remote attackers to inject arbitrary script/HTML. Documents consistently describe the vulnerability as a Cross-site scripting flaw in the post...

CVE-2010-0321

creationtimestamp| type| source ---|---|--- 2010-01-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33485...

CVE-2009-0321

Apple Safari 3.2.1 on Windows is reported vulnerable to a remote DoS via a malformed URI: an http link where the authority/hostname is "." or "..". The issue appears in the browser’s URI handling and can trigger an infinite loop or access violation. Connected sources (OpenVAS entries) corroborate...

FreeBSD Ports: fetchmail

The remote host is missing an update to the system as announced in the referenced advisory. VID f11d3b22-88c6-11da-a7b2-0060084a00e5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD : fetchmail -- crash when bouncing a message (f11d3b22-88c6-11da-a7b2-0060084a00e5)

Matthias Andree reports : Fetchmail contains a bug that causes itself to crash when bouncing a message to the originator or to the local postmaster. The crash happens after the bounce message has been sent, when fetchmail tries to free the dynamic array of failed addresses, and calls the free...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-3088 https://vulners.com/cve/CVE-2005-4348...

CVE-2006-0321

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service crash via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster...

CVE-2006-0321

Summary: CVE-2006-0321 affects fetchmail 6.3.0 and older versions before 6.3.2. An attacker can remotely trigger a denial of service by sending crafted messages that cause fetchmail to free an invalid pointer during bounce handling to the originator or local postmaster. Root cause: erroneous free...

[VulnWatch] fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321)

fetchmail-SA-2006-01: crash when bouncing messages. Topics: 1 crash when bouncing a message 2 fetchmail 6.2.5.X end of life Author: Matthias Andree Version: 1.0 Announced: 2006-01-22 Type: free with bogus pointer Impact: fetchmail crashes Danger: low Credits: Nathaniel W. Turner bug report CVE...

CVE-2005-0321

CVE-2005-0321 affects MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0. An authenticated remote user can cause information disclosure by requesting one of four calendar pages (calendar_d.html, calendar_m.html, calendar_w.html, calendar_y.html), which reveals the installation path. The issue is...

CVE-2004-0321

Team Factor 1.25 and earlier allows remote attackers to cause a denial of service crash via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory...

CVE-2004-0321

CVE-2004-0321 affects Team Factor 1.25 and earlier. A remote attacker can crash the service by sending a packet where the data block size is a negative number, causing Team Factor to read unallocated memory and trigger a denial of service. The available descriptions consistently state this issue ...

CVE-2004-0321

Team Factor 1.25 and earlier allows remote attackers to cause a denial of service crash via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory...

CVE-2003-0321

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

CVE-2003-0321

CVE-2003-0321 affects BitchX IRC client up to version 1.0-0c19 and earlier. The vulnerability stems from multiple buffer overflows in core parsing/handling paths (send_ctcp, cannot_join_channel, cluster, BX_compress_modes, handle_oper_vision, ban_it) when processing long hostnames, nicknames, or ...

CVE-2002-0321

Yahoo! Messenger 5.0 is affected by a vulnerability that lets a remote attacker spoof another user’s name in messages, enabling social engineering or a denial-of-service via flooding. The issue arises from the ability to modify the source username used in messages. Impact is described as potentia...

CVE-2001-0321

CVE-2001-0321 corresponds to a traversal/Arbitrary File Read in the PHP-Nuke CGI opendir.php. The affected component is the opendir.php script used by PHP-Nuke; the root cause is a filename parameter in the requesturl argument that allows remote attackers to read arbitrary files on the server. Th...

CVE-2001-0321

opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter...

PHP-Nuke opendir.php Traversal Arbitrary File Read

The remote host has the CGI 'opendir.php' installed. This CGI allows anyone to read arbitrary files with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10655; scriptversion"1.26"...