CVE-2008-2380

SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes...

CVE-2008-2380

CVE-2008-2380 affects Courier Authentication Library (courier-authlib). The CVE describes an SQL injection in authpgsqllib.c when using a non-Latin locale Postgres database, allowing exploitation via query parameters containing apostrophes. Public advisories (Gentoo GLSA-200903-25, SUSE/openSUSE ...

Courier-Authlib非拉丁字符处理postgres SQL注入漏洞

BUGTRAQ ID: 32926 CVE ID：CVE-2008-2380 CNCVE ID：CNCVE-20082380 Courier-Authlib是一款Courier验证库。 authpgsqllib.c存在漏洞，如果Postgres数据库使用非拉丁字集，可导致SQL注入攻击。 目前没有详细漏洞细节提供。 Courier Mail Server Courier-Authlib 0.61 Courier Mail Server Courier-Authlib 0.60.6 Courier Mail Server Courier-Authlib 0.60.5 升级程序： Couri...

Debian DSA-1688-1 : courier-authlib - SQL injection

Two SQL injection vulnerabilities have been found in courier-authlib, the courier authentification library. The MySQL database interface used insufficient escaping mechanisms when constructing SQL statements, leading to SQL injection vulnerabilities if certain charsets are used CVE-2008-2380 . A...

openSUSE 10 Security Update : courier-authlib (courier-authlib-5871)

Insufficient quoting allowed attackers to inject SQL statements when using the pgsql backend CVE-2008-2380. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update courier-authlib-5871. The text...

[SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1688 [email protected] http://www.debian.org/security/ Steffen Joeris December 20, 2008 http://www.debian.org/security/faq -...

DSA-1688-1 courier-authlib - SQL injection

Bulletin has no description...

CVE-2007-2380

The CVE-2007-2380 issue affects the Microsoft Atlas framework, where JSON data is exchanged without an associated protection scheme, enabling JavaScript Hijacking. Affected component is the Atlas JSON data exchange; root cause is lack of protection in JSON data retrieved via a SCRIPT element SRC ...

CVE-2004-2380

The CVE describes a directory traversal vulnerability in Twilight Utilities Web Server 2.0.0.0, exploitable through postfile.exe where an attacker can abuse the attfile parameter containing .. to write arbitrary files. Affected component is postfile.exe; the underlying cause is improper validatio...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-0768

Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...

CVE-2005-0768

CVE-2005-0768 concerns a buffer overflow in the administration web server of GoodTech Telnet Server (versions 4.0 and 5.0, possibly all versions before 5.0.7) that can be triggered by sending a long string to port 2380. The vulnerability is described as allowing remote code execution. Public refe...