Ubuntu: Security Advisory (USN-838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-838-1: Dovecot vulnerabilities

It was discovered that the ACL plugin in Dovecot would incorrectly handle negative access rights. An attacker could exploit this flaw to access the Dovecot server, bypassing the intended access restrictions. This only affected Ubuntu 8.04 LTS. CVE-2008-4577 It was discovered that the ManageSieve...

Debian Security Advisory DSA 1893-1 (cyrus-imapd-2.2 kolab-cyrus-imapd)

The remote host is missing an update to cyrus-imapd-2.2 kolab-cyrus-imapd announced via advisory DSA 1893-1. OpenVAS Vulnerability Test $Id: deb18931.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1893-1 cyrus-imapd-2.2 kolab-cyrus-imapd Authors: Thomas...

Fedora Core 11 FEDORA-2009-9901 (cyrus-imapd)

The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9901. OpenVAS Vulnerability Test $Id: fcore20099901.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9901 cyrus-imapd Authors: Thomas Reinke Copyright: Copyright c...

CentOS Security Advisory CESA-2009:1459 (cyrus-imapd)

The remote host is missing updates to cyrus-imapd announced in advisory CESA-2009:1459. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:242 (dovecot)

The remote host is missing an update to dovecot announced via advisory MDVSA-2009:242. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Security Advisory RHSA-2009:1459

The remote host is missing updates announced in advisory RHSA-2009:1459. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support. Multiple buffer overflow flaws were found in the Cyrus IMAP Sieve implementation. An authenticated user able to create...

Fedora Core 10 FEDORA-2009-9869 (cyrus-imapd)

The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9869. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Mandrake Security Advisory MDVSA-2009:242-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory MDVSA-2009:242-1. OpenVAS Vulnerability Test $Id: mdksa20092421.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:242-1 dovecot Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-9901 (cyrus-imapd)

The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9901. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

RHEL 4 / 5 : cyrus-imapd (RHSA-2009:1459)

Updated cyrus-imapd packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain a high-performance mail server with IMAP,...

[SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1893-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 23, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1892-1] New dovecot packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1892-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 23, 2009 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : dovecot (MDVSA-2009:242)

A vulnerability was discovered and corrected in dovecot : Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary...

Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities

This host has Dovecot Sieve Plugin installed and is prone to multiple Buffer Overflow Vulnerabilities OpenVAS Vulnerability Test $Id: secpoddovecotsievemultbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright:...

CVE-2009-3235

Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by...

CVE-2009-3235

The CVE describes multiple stack-based buffer overflows in the Sieve plugin used by Dovecot (Sieve implementation derived from Cyrus libsieve). Affected are Dovecot 1.0.x prior to 1.0.4 and Dovecot 1.1.x prior to 1.1.7. The vulnerabilities enable context-dependent attackers to cause a denial of s...

CVE-2008-3235

Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 has unknown impact and attack vectors...

CVE-2008-3235

The CVE-2008-3235 entry concerns an unspecified vulnerability in the PropFilePasswordEncoder utility of the Security component in IBM WebSphere Application Server (WAS) 5.1 prior to 5.1.1.19. The impact and attack vectors are unknown per the description. Connected records reiterate the same issue...

Cross site scripting

Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235...