Gentoo Security Advisory GLSA 200505-09 (gaim)

The remote host is missing updates announced in advisory GLSA 200505-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: squirrelmail

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

CVE-2008-1262

The CVE-2008-1262 entry concerns the Airspan WiMax ProST 4.1 antenna running software 6.5.38.0, where the administration panel does not verify authentication credentials. This authentication flaw enables remote attackers to perform at least two actions: (1) upload malformed firmware, and (2) bind...

Debian: Security Advisory (DSA-1262-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : squirrelmail (squirrelmail-3629)

This update of squirrelmail fixes two cross-site-scripting vulnerabilities that can be used by an attacker to read opened emails CVE-2007-1262 and to send email on behalf of the user CVE-2007-2589. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

RHEL 3 / 4 / 5 : squirrelmail (RHSA-2007:0358)

A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Several HTML...

CentOS 3 / 4 / 5 : squirrelmail (CESA-2007:0358)

A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Several HTML...

Moderate: Red Hat Security Advisory: squirrelmail security update

A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Several HTML...

Moderate: squirrelmail security update

1.4.8-4.0.1.el4.0.1 - remove banners 1.4.8-4.0.1 - resolves: 239650: CVE-2007-1262 squirrelmail cross-site scripting flaw...

CVE-2007-1262

Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...

CVE-2007-1262

Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...

CVE-2007-1262

CVE-2007-1262 affects SquirrelMail 1.4.0–1.4.9a with multiple HTML filter XSS weaknesses: injection via the data: URI in HTML email attachments injection via improper handling of non-ASCII characters when viewed in Internet Explorer.Exploitation could allow remote script execution within the user...

Debian DSA-1262-1 : gnomemeeting - format string

'Mu Security' discovered that a format string vulnerability in the VoIP solution GnomeMeeting allows the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1262...

eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflow

This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the LICMGRADDLICENSE command, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires Metasploit:...

CentOS 3 / 4 : gaim (CESA-2005:429)

An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...

CVE-2003-1262

CVE-2003-1262 describes a buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1. This bug allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via a URL request that uses unusually long (1) host, (2) referer, or (3) userAgent val...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:086)

More vulnerabilities have been found in the gaim instant messaging client. A stack-based buffer overflow bug was found in how gaim processes a message containing a URL; a remote attacker could send a carefully crafted message to cause the execution of arbitrary code on the user's machine...

gaim security update

CentOS Errata and Security Advisory CESA-2005:429 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-May/073801.html https://lists.centos.org/pipermail/centos-announce/2005-May/073802.html...