123 matches found
CVE-2013-4478
Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...
[SECURITY] [DSA 2805-1] sup-mail security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2805-1 [email protected] http://www.debian.org/security/ Luciano Bello November 27, 2013 http://www.debian.org/security/faq -...
Debian DSA-2805-1 : sup-mail - command injection
joernchen of Phenoelit discovered two command injection flaws in Sup, a console-based email client. An attacker might execute arbitrary command if the user opens a maliciously crafted email. - CVE-2013-4478 Sup wrongly handled the filename of attachments. - CVE-2013-4479 Sup did not sanitize the...
[SECURITY] [DSA 2805-1] sup-mail security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2805-1 [email protected] http://www.debian.org/security/ Luciano Bello November 27, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2805-1 (sup-mail - command injection)
joernchen of Phenoelit discovered two command injection flaws in Sup, a console-based email client. An attacker might execute arbitrary command if the user opens a maliciously crafted email. CVE-2013-4478 Sup wrongly handled the filename of attachments. CVE-2013-4479 Sup did not sanitize the...
DSA-2805-1 sup-mail - remote command injection
Bulletin has no description...
Debian: Security Advisory (DSA-2805-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SOL14317 - OpenSSH J-PAKE vulnerability CVE-2010-4478
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy...
CVE-2012-4478
The CVE-2012-4478 vulnerability is a CSRF flaw in Drupal’s Drag & Drop Gallery 6.x module that can enable remote attackers to hijack an administrator’s session. Affected component: Drag & Drop Gallery module (Drupal contrib) 6.x. Root cause: CSRF in the module’s handling of admin actions, allowin...
CVE-2010-4478
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a...
CVE-2010-4478
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a...
CVE-2009-4478
CVE-2009-4478 affects Xstate Real Estate 1.0 with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via PATH_INFO to (1) home.html or (2) lands.html. The vulnerability stems from improper PATH_INFO handling. Impact is web-based XSS; no specific exploi...
CVE-2008-4478
CVE-2008-4478 affects Novell eDirectory. The vulnerability resides in dhost.exe and the SOAP/HTTP web interface, where improper parsing of the SOAP Content-Length header (and certain Core Protocol opcodes, notably 0x0F) triggers a heap-based or arithmetic overflow, enabling remote code execution....
ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability
ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-063 October 8, 2008 -- CVE ID: CVE-2008-4478 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...
Novell eDirectory多个缓冲区溢出漏洞
BUGTRAQ ID: 31553 CVE ID：CVE-2008-4478 CVE-2008-4479 CVE-2008-4480 CNCVE ID：CNCVE-20084478 CNCVE-20084479 CNCVE-20084480 Novell eDirectory是一款支持轻量目录访问协议LDAP并基于目录的身份管理系统。 Novell eDirectory存在多个缓冲区溢出如下： -WEB控制台运行在TCP...
SuSE 10 Security Update : Tk (ZYPP Patch Number 4478)
This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...
CVE-2007-4478
CVE-2007-4478 affects Microsoft Internet Explorer 6.0 and 7. An XSS vulnerability occurs when a user saves a page to a local file; the URI string and the document’s content can lead to execution of arbitrary script in the local zone. Connected sources describe saving a URL containing a crafted UR...
CVE-2007-4478
Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with...
