SECURITY.NNOV: Special device access in The Bat!

Dear bugtraq, Topic: Special device access in The Bat! Author: 3APA3A [email protected] Date: February, 25 2002 Software: The Bat! 1.53d, 1.54beta Vendor: Ritlabs http://www.thebat.net Risk: Low to average Remote: Yes Exploitable: Yes Vendor Status: Notified, not verified Details: The Bat!...

Special device access in The Bat!

Topic: Special device access in The Bat! Author: 3APA3A Date: February, 25 2002 Software: The Bat! 1.53d, 1.54beta Vendor: Ritlabs http://www.thebat.net Risk: Low to average Remote: Yes Exploitable: Yes Vendor Status: Notified, not verified Details: The Bat! has special device access bug. If The...

squirrelmail: squirrelspell plugin check_me.mod.php bug

In-Reply-To: [email protected] Squirrelspell v0.3.1 is know to be affected, vulnerability of other versions is unknown. The buggy code extraction: --------------------- // Define the command used to spellcheck the document. $sqspellcommand=$SQSPELLAPP...

CVE-2001-1542

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments...

CVE-2001-1531

Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename...

CVE-2001-1581

The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header...

PT-2001-2056 · Hypermail · Hypermail

Name of the Vulnerable Software and Affected Versions: Hypermail affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands on a server that supports Server Side Includes SSI by attaching a file with a .shtml extension. This attachment is then...

Переполнение буфера в Claris Emailer (buffer overflow)

Переполнение буфера при длинном имени вложенного в письмо файла...

CVE-2001-1282

Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information...

CVE-1999-1017

Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message...

CVE-1999-1017

CVE-1999-1017 concerns Seattle Labs Emurl 2.0 (and possibly earlier versions), where e-mail attachments are stored in a directory with scripting enabled. This configuration allows a malicious ASP file attachment to execute when the recipient opens the message. The connected documents reproduce th...

Outlook Express 6 - Attachment Security Bypass

Outlook Express 6 - Attachment Security Bypass source: https://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML...

Outlook Express 6 - Attachment Security Bypass

source: https://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML frame in an email message to bypass the...

carol clickme: Outlook Express 6.00

Wednesday, August 29, 2001 Trivial file attachment execution on the new Outlook Express 6.00 mail and news client. This can be achieved with an amount of engineering and all new so-called security features enabled. The manufacturer http://www.microsoft.com has done a splendid job so farof beefing...

Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass

Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass source: https://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneo...

Softek MailMarshal 4 / Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass

source: https://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneous characters in the filename extension of a hostile attachment. The affected...

CVE-2000-0891

A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email...

CVE-2001-0398

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon...

Security Bulletin MS01-030

Title: Incorrect Attachment Handling in Exchange 2000 OWA Can Execute Script Date: 06 June 2001 Software: Microsoft Exchange 2000 Server Outlook Web Access Impact: Run code of attacker's choice Bulletin: MS01-030 Microsoft encourages customers to review the Security Bulletin at:...

Qualcomm Eudora 5.1 - Hidden Attachment Execution

Qualcomm Eudora 5.1 - Hidden Attachment Execution source: https://www.securityfocus.com/bid/2796/info Eudora is an email program for the Windows platform. Eudora contains a vulnerability which may make it possible for an attacker to excecute arbitrary code on a remote system even if 'allow...