Hastymail rs parameter command injection

Added: 12/28/2011 CVE: CVE-2011-4542 BID: 50791 OSVDB: 77331 Background Hastymail is a fast, secure, rfc-compliant, cross-platform IMAP/SMTP client application written in PHP providing a clean web interface for sending and reading E-mail. Problem Hastymail2 fails to properly sanitize user-supplie...

krb5: telnet client and server encrypt_keyid heap-based buffer overflow

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

krb5: telnet client and server encrypt_keyid heap-based buffer overflow

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

CVE-2011-4783

CVE-2011-4783 affects IDA Pro’s IDAPython plugin up to version 1.5.2.3. A crafted IDB file can trigger arbitrary code execution due to improper handling of swig_runtime_data in the current working directory, with an attacker leveraging user-assisted remote access. The vulnerability enables code e...

CVE-2011-1393

IBM Lotus Domino Notes RPC Authentication Processing Denial of Service vulnerability (CVE-2011-1393) affects IBM Lotus Domino Server 8.x prior to 8.5.2 FP4. The issue is an unspecified flaw in the server’s authentication functionality that allows remote attackers to crash the daemon via a crafted...

CVE-2011-3841

The CVE-2011-3841 entry concerns the WordPress WP Symposium plugin vulnerability: a Cross-Site Scripting (XSS) flaw in the file uploadify/get_profile_avatar.php that allows arbitrary script/HTML injection via the uid parameter. Affected versions are before 11.12.08. Root cause: input handling in ...

CVE-2011-4166

Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...

CVE-2011-4537

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4536

WellinTech KingView is affected by a heap-based buffer overflow in HistoryServer.exe (HistorySvr.dll, nettransdll.dll) that can be triggered by parsing op-code 3 packets on TCP port 777, allowing remote code execution. Affected are KingView 6.53 and 65.30.2010.18018. Root cause: heap allocation b...

CVE-2011-4168

Summary : CVE-2011-4168 affects HP Managed Printing Administration prior to v2.6.4. Affected component : hpmpa/jobDelivery/Default.asp within HP Managed Printing Administration. Root cause / vulnerability type : Directory traversal vulnerability that allows an attacker to influence file creation ...

CVE-2011-4537

The CVE-2011-4537 entry concerns the 7-Technologies IGSS (Interactive Graphical SCADA System). Affected versions: IGSS 9.0.0.11355 and earlier. Issue: multiple buffer overflows in IGSS allow remote attackers to exploit by sending crafted TCP packets to ports 12397 or 12399, potentially leading to...

CVE-2011-4167

CVE-2011-4167 : A stack-based buffer overflow in HP Managed Printing Administration (MPAUploader.dll) prior to v2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp. Exploitation was reported against HP MPA before 2.6.4, enab...

CVE-2011-4050

The CVE-2011-4050 issue affects 7-Technologies IGSS Data Server (IGSSdataServer.exe) in IGSS 9.x. A buffer overflow in the server, caused by handling of file/packet data, can be triggered remotely by sending a crafted TCP packet to port 12401, leading to a remote denial of service. Public referen...

CVE-2011-4784

The vulnerability CVE-2011-4784 affects the NVIDIA Stereoscopic 3D driver for Windows, with versions before 7.17.12.7565. Root cause: the driver does not properly handle commands sent to a named pipe, enabling local privilege escalation via a crafted application. Affected component: nvStereo Ster...

CVE-2011-4166

CVE-2011-4166 corresponds to a directory traversal vulnerability in HP Managed Printing Administration (MPA) in the MPAUploader.Uploader.1.UploadFiles() function. Affected software is HP MPA before version 2.6.4. The vulnerability permits remote attackers to create arbitrary files by submitting c...

CVE-2011-4537

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4536

Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe aka HistoryServer.exe in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet...

CVE-2011-4167

Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp...

CVE-2011-4169

HP Managed Printing Administration before 2.6.4 is affected by CVE-2011-4169. The vulnerability arises in the img_id parameter handling within multiple HP MP A scripts (imglist/imgselect, imgmap/bgselect, imgmap/imgselect) where input can be manipulated to perform SQL injection and directory trav...

Unfixed XSS vulnerability at forum.cifraclub.com.br

Security researcher NetFuzzer, has submitted on 27/12/2011 a cross-site-scripting XSS vulnerability affecting forum.cifraclub.com.br, which at the time of submission ranked 226 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is...