212 matches found
Debian Security Advisory DSA 756-1 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 756-1. Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1769 Martijn Brinkers...
CentOS 3 / 4 : SquirrelMail (CESA-2005:595)
An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 04 Aug 2005 The previous SquirrelMail package released with this errata contained a bug which rendered the...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML 1 via the referer parameter in sendMail, and via attributes of 2 the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE...
CVE-2006-1769
CVE-2006-1769 affects UserLand Manila 9.5 and earlier, with XSS vulnerabilities that let remote attackers inject arbitrary script via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$. The connected records also indicate overlap with CVE-2006-1903, which describe...
Fedora Core 3 : squirrelmail-1.4.6-0.cvs20050812.1.fc3 (2005-779)
It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...
Fedora Core 4 : squirrelmail-1.4.6-0.cvs20050812.1.fc4 (2005-780)
It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...
Moderate: Red Hat Security Advisory: squirrelmail security update
An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 04 Aug 2005 The previous SquirrelMail package released with this errata contained a bug which rendered the...
CVE-2002-1769
Microsoft Site Server 3.0 before SP4 has a default LDAP_Anonymous user with password LdapPassword_1, enabling remote attackers to log on locally with the Log on locally privilege. The vulnerability arises from setting a default account/password that grants local access, as documented in CVE-2002-...
CVE-2005-1769
CVE-2005-1769 concerns multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail versions 1.4.0–1.4.4. The issues allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the URL or in an e-mail message. The weaknesses have a CVSS v2 base score of 4.3 ...
CVE-2004-1769
CVE-2004-1769 affects cPanel 9.1.0 build 34 and earlier (including 8.x). The vulnerability allows remote code execution through the resetpass feature by passing a crafted value for the user parameter to the resetpass endpoint, enabling arbitrary command execution on the server. Exploit details ap...
Microsoft Site Server Multiple Script Information Disclosure
The remote web server seems to leak information when some pages are accessed using the account 'LDAPAnonymousUser' with the password 'LdapPassword1'. Pages which leak information include, but are not limited to : - /SiteServer/Admin/knowledge/persmbr/vs.asp -...