95 matches found
SLES9: Security update for clamav
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: clamav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016172 within the SuSE...
CVE-2009-3501
CVE-2009-3501 describes an SQL injection in BPStudents 1.0 (BPowersHouse BPStudents) affecting the file students.php, exploited through the test parameter in a preview action. The underlying cause is improper handling of user input allowing arbitrary SQL execution, with potential partial impact o...
[SECURITY] Fedora 11 Update: cyrus-imapd-2.3.15-1.fc11
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
imap-capabilities NSE Script
Retrieves IMAP email server capabilities. IMAP4rev1 capabilities are defined in RFC 3501. The CAPABILITY command allows a client to ask a server what commands it supports and possibly any site-specific policy. Script Arguments smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See...
CVE-2008-3501
CVE-2008-3501 describes a cross-site scripting (XSS) vulnerability in the WebAccess simple interface of Novell GroupWise 7.0.x . The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Per available data, the exploitability is network-based with median com...
CVE-2007-3501
DirectAdmin CMD_USER_STATS has an XSS vulnerability in versions 1.30.1 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the domain parameter (a separate vector from CVE-2007-1508). The connected records confirm the affected component and vector but do not provide...
CVE-2006-3501
Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Radiance image...
CVE-2006-3501
Apple Mac OS X 10.4.7 ImageIO contains an integer overflow in Radiance image handling that can crash or allow arbitrary code execution when viewed by a user. Affected component: ImageIO framework; impact ranges from denial of service (application crash) to possible code execution with user-assist...
Mandrake Linux Security Advisory : clamav (MDKSA-2005:205)
A number of vulnerabilities were discovered in ClamAV versions prior to 0.87.1 : The OLE2 unpacker in clamd allows remote attackers to cause a DoS segfault via a DOC file with an invalid property tree CVE-2005-3239 The FSG unpacker allows remote attackers to cause 'memory corruption' and execute...
DSA-887-1 clamav - several
Bulletin has no description...
CVE-2005-3501
The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...
CVE-2005-3501
The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...
CVE-2005-3501
CVE-2005-3501 affects ClamAV before 0.87.1 via the cabd_find path in libmspack (cab d.c) where a crafted CAB file causes cabd_find to be called with a zero length, leading to a denial of service (infinite loop). The vulnerability is tied to ClamAV's libmspack CAB handling; upgrade to 0.87.1 or la...
CVE-2005-3501
The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...
