openSUSE 10 Security Update : squirrelmail (squirrelmail-6242)

Multiple vulnerabilities have been fixed in SquirrelMail: an XSS and input sanitization bug both CVE-2009-1578, a server-side code execution CVE-2009-1579, a login session hijacking bug CVE-2009-1580 and another bug that allowed phishing and XSS attacks CVE-2009-1581. %NASLMINLEVEL 70300 C Tenabl...

Fedora 11 : squirrelmail-1.4.18-1.fc11 (2009-4875)

Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - updated to 1.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

FreeBSD Ports: cyrus

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: cyrus

The remote host is missing an update to the system as announced in the referenced advisory. VID 35f6fdf8-a425-11d8-9c6d-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1580

Technical details for CVE-2008-1580 are not publicly provided in the supplied documents; monitor for updates.

Mac OS X Multiple Vulnerabilities (Security Update 2008-003)

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...

Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...

Apple Mac OS X 2008-003更新修复多个安全漏洞

BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...

Debian Security Advisory DSA 1580-1 (phpgedview)

The remote host is missing an update to phpgedview announced via advisory DSA 1580-1. OpenVAS Vulnerability Test $Id: deb15801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1580-1 phpgedview Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1580-1 : phpgedview - programming error

It was discovered that phpGedView, an application to provide online access to genealogical data, allowed remote attackers to gain administrator privileges due to a programming error. Note: this problem was a fundamental design flaw in the interface API to connect phpGedView with external programs...

CVE-2007-1580

FTPDMIN 0.96 is affected. A remote attacker can trigger a denial of service (daemon crash) by issuing a LIST command targeting a Windows drive letter (e.g., //A:). The issue is documented as a potential buffer overflow in some sources, but the available records state only a DoS via LIST for a dri...

CVE-2006-1580

Multiple cross-site scripting XSS vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in query.jsp and 2 entryId parameter in edit.jsp...

CVE-2006-1580

Multiple cross-site scripting XSS vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in query.jsp and 2 entryId parameter in edit.jsp...

Cyrus IMAP pre-login buffer overflow

According to its banner, the remote Cyrus IMAP server is vulnerable to a pre-login buffer overrun. SPDX-FileCopyrightText: 2002 Paul Johnston, Westpoint Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2001-1580

CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...

CVE-2005-1580

BoastMachine 3.0 is affected by an arbitrary file upload via users.ini.php due to improper file type restriction, enabling remote code execution. Connected records also indicate a vulnerability class lasting into newer versions; remediation noted in Nessus: upgrade to BoastMachine 3.1 or later to...

CVE-2005-1580

users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code...

CVE-1999-1580

CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...

CVE-1999-1580

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable and passing crafted values to the -oR option...

CVE-2004-1580

CubeCart 2.0.1 is affected: index.php uses the cat_id parameter in SQL queries, enabling remote SQL injection to potentially modify or disclose data. Root cause: unsafely constructed SQL from user input in cat_id. Impact aligns with CVSS: HIGH (partial confidentiality, integrity, and availability...