70 matches found
Railo 4.2.1 - Remote File Inclusion (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Railo Remote File Include', 'Description' = ' This module exploits a remote file include vulnerability in Railo, tested against versi...
Railo 4.2.1 Remote File Inclusion
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Railo Remote File Include', 'Description' = ' This module exploits a remote file include vulnerability in Railo, tested against versi...
CVE-2013-5468
CVE-2013-5468 affects IBM Algo One usage in MetaData Management Tools (UDS 4.7.0–5.0.0) and AlgoWeb components (ACSWeb 4.7.0–4.9.0; AlgoWebApps 5.0.0). The common issue is that login requests are not encrypted, enabling remote attackers to sniff sensitive data on the network. Connected documents ...
Debian Security Advisory DSA 2585-1 (bogofilter - buffer overflow)
A heap-based buffer overflow was discovered in bogofilter, a software package for classifying mail messages as spam or non-spam. Crafted mail messages with invalid base64 data could lead to heap corruption and, potentially, arbitrary code execution. OpenVAS Vulnerability Test $Id: deb25851.nasl...
Oracle Linux 4 : wireshark (ELSA-2006-0726 / ELSA-2006-0658 / ELSA-2006-0602)
New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Users of Wireshark should upgrade to these updated packag...
Mandriva Linux Security Advisory : bogofilter (MDVSA-2013:064)
Updated bogofilter package fixes security vulnerability : In bogofilter before 1.2.3, bogofilter's/bogolexer's base64 could overwrite heap memory in the character set conversion in certain pathological cases of invalid base64 code that decodes to incomplete multibyte characters CVE-2012-5468...
SuSE 11.2 Security Update : bogofilter (SAT Patch Number 7135)
A heap corruption in bogofilter's base64 decoding function, caused by incomplete multibyte characters, could have resulted in a Denial of Service App. crash or potentially allowed the execution of arbitrary code. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Fedora 18 : bogofilter-1.2.3-1.fc18 (2012-19664)
updated to 1.2.3 fixes 883358, CVE-2012-5468 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2012-5468
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters...
CVE-2012-5468
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters...
CVE-2012-5468
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters...
CVE-2012-5468
CVE-2012-5468 affects bogofilter prior to version 1.2.3, where a heap-based buffer overflow in bogolexer/iconvert.c can be triggered by an email containing base64 data that decodes to incomplete multibyte characters. This may cause a crash (DoS) and potentially allow arbitrary code execution. Pub...
CVE-2012-5468
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters...
Fedora Update for bogofilter FEDORA-2012-19705
Check for the Version of bogofilter OpenVAS Vulnerability Test Fedora Update for bogofilter FEDORA-2012-19705 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Fedora Update for bogofilter FEDORA-2012-19740
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : bogofilter-1.2.3-1.fc17 (2012-19705)
updated to 1.2.3 fixes 883358, CVE-2012-5468 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 16 : bogofilter-1.2.3-1.fc16 (2012-19740)
updated to 1.2.3 fixes 883358, CVE-2012-5468 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] [DSA 2585-1] bogofilter security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2585-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2585-1] bogofilter security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2585-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
FreeBSD Ports: bogofilter
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...