195 matches found
Exim string_format Function Remote Overflow
A heap overflow vulnerability exists in the version of exim installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server with the privilege of the exim server. A separate vulnerability...
CVE-2010-4345
CVE-2010-4345 is a local privilege escalation in Exim up to version 4.72, where the exim user could gain root privileges by specifying an alternate configuration file with -C or via macro overrides (-D). Upstream fixes require changes to Exim behavior; newer builds drop root privileges when run w...
CVE-2010-4345
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spooldirectory directive...
Exim security issue in historical release
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It has come to the attention of The Exim Maintainers that there is an exploit circulating in the wild which affects versions of Exim versions 4.69 and below -- Exim 4.70 was released in November 2009. The flaw permits remote code execution over SMTP...
Exim alternate configuration privilege escalation vulnerability
Overview A vulnerability in the way that the Exim mail server handles configuration files may allow a local attacker to gain escalated privileges on an affected system. Description Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to t...
Debian DSA-2131-1 : exim4 - arbitrary code execution
Several vulnerabilities have been found in exim4 that allow a remote attacker to execute arbitrary code as root user. Exploits for these issues have been seen in the wild. This update fixes a memory corruption issue that allows a remote attacker to execute arbitrary code as the Debian-exim user...
Exim4 <= 4.69 string_format Function Heap Buffer Overflow
$Id: exim4stringformat.rb 11289 2010-12-11 10:55:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2009-4345
Cross-site scripting XSS vulnerability in the vShoutbox vshoutbox extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4345
CVE-2009-4345 describes a cross-site scripting (XSS) vulnerability in the vShoutbox extension (vshoutbox) for TYPO3, version 0.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: vShoutbox TYPO3 extension; root cause details a...
CVE-2008-4345
CVE-2008-4345 affects WebPortal CMS 0.7.4 and earlier. It is a SQL injection in download.php via the aid parameter allowing remote SQL command execution. NVD reports a base score of 7.5 (HIGH) with network attack vector, low complexity, no authentication. Connected documents do not provide additi...
Gentoo Security Advisory GLSA 200610-15 (asterisk)
The remote host is missing updates announced in advisory GLSA 200610-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2007-4345
CVE-2007-4345 : A buffer overflow in IMail Client 9.22 (shipped with IPSwitch IMail Server 2006.22) can be triggered by a long boundary parameter in multipart MIME data. This remote vulnerability allows an attacker to execute arbitrary code on the affected system with the user’s privileges.
CVE-2006-4345
CVE-2006-4345 : A stack-based buffer overflow in MGCP support (channels/chan_mgcp.c) of Asterisk 1.0–1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response. Remediation recommended by Gentoo GLSA indicates upgrading Asterisk to >= 1.2.13. Notes fr...
CVE-2005-4345
CVE-2005-4345 affects Adobe ColdFusion MX 7.0. The vulnerability arises because the Administrator password hash is exposed via an API call, allowing local developers to obtain the hash and gain privileges. This is documented in the NVD entry for CVE-2005-4345. The connected data confirms the affe...
