FreeBSD Ports: fetchmail

The remote host is missing an update to the system as announced in the referenced advisory. VID 2a6a966f-1774-11df-b5c1-0026189baca3 OpenVAS Vulnerability Test $ Description: Auto generated from VID 2a6a966f-1774-11df-b5c1-0026189baca3 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-0562

The CVE-2010-0562 issue affects fetchmail 6.3.11–6.3.13, where the sdump() function in sdump.c can overflow a heap buffer when in verbose mode on platforms with signed char. An attacker could exploit an X.509 certificate whose non‑printable high‑bit characters trigger this overflow, potentially c...

Microsoft Office Web Components DataSourceControl ActiveX Control memory allocation

Added: 08/27/2009 CVE: CVE-2009-0562 BID: 35990 OSVDB: 56914 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A heap memory corruption vulnerability in the OWC10.DataSourceControl ActiveX control allows command execution when a use...

CVE-2009-0562

CVE-2009-0562 describes a heap memory corruption in the Office Web Components ActiveX control (OWC10.DataSourceControl) used by Office XP/2003 Web Components and related components. The vulnerability could allow remote code execution when a user loads a malicious page that loads/unloads the contr...

ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability

ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-055 August 11, 2009 -- CVE ID: CVE-2009-0562 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Word Microsoft Office Excel ...

MS09-043: Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (957638)

The remote host is running a version of Microsoft Office Web Components that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send specially crafted URLs to a user of the remote computer and have him process it with Microsoft Office Web...

Sql injection

SQL injection vulnerability in the Detodas Restaurante comrestaurante 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562...

CVE-2008-0562

The vulnerability CVE-2008-0562 affects the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla!, where an SQL injection can be triggered through the id parameter in a detail action (index.php). The issue is confirmed to be exploitable remotely over the network with low attack complexi...

CVE-2007-0562

CVE-2007-0562 affects Windows Explorer (explorer.exe) on Microsoft Windows XP SP2. A crafted .AVI file can cause a denial-of-service (application crash) when the user right-clicks the file. The description indicates that a user-assisted remote attacker could trigger the crash, implying a remote t...

CVE-2006-0562

The CVE-2006-0562 entry describes a Cross-site Scripting (XSS) vulnerability in PluggedOut Blog 1.9.9c, where an attacker can inject arbitrary web script or HTML through the data parameter of problem.php. The vulnerability enables an attacker to execute script in a user’s browser, with the impact...

Oracle 9i Application Server Globals.jsa Access Information Disclosure Vulnerability - Active Check

In the default configuration of Oracle 9i Application Server AS, it is possible to make requests for the globals.jsa file for a given web application. These files should not be returned by the server as they often contain sensitive information. SPDX-FileCopyrightText: 2002 Matt Moore Some text...

CVE-2005-0562

The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...

MS05-022: Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

The remote host is running MSN Messenger. The version of MSN Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles GIF files with height and width fields. An attacker may exploit this vulnerability to execute arbitrary code on the remote host. C Tenable...

CVE-2003-0562

Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service ABEND via a long input string...

CVE-2003-0562

Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service ABEND via a long input string...

CVE-2003-0562

NetWare NetWare Enterprise Web Server 5.1/6.0 is vulnerable via the CGI2PERL.NLM PERL handler. A buffer overflow can be triggered by a long URL to /perl/, crashing the server (ABEND) and potentially allowing arbitrary code execution. Public sources describe vulnerable products as NetWare 5.1 SP6 ...

CVE-2002-0562

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa...

CVE-2002-0562

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa...

CVE-2001-0562

a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...

CVE-2001-0562

CVE-2001-0562 affects the a1disp.cgi component of Drummond Miles A1Stats prior to version 1.6. The initial description documents a remote command execution vulnerability where a crafted URL containing shell metacharacters can force the execution of arbitrary commands on the server. The impact is ...