Buffer overflow

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

CVE-2008-0394

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

CVE-2008-0394

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

CVE-2008-0394

CVE-2008-0394 : A buffer overflow in Citadel SMTP Server (versions 7.10 and earlier) is triggered by a long RCPT TO command due to insufficient bounds checking in the makeuserkey function. Remote attackers could potentially execute arbitrary code. Multiple advisories confirm the vulnerability and...

CVE-2008-0394: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

Citadel SMTP <= 7.10 Remote Overflow Exploit

No description provided by source. Citadel SMTP = 7.10 Remote Overflow Exploit http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz...

Citadel < 7.11 makeuserkey Function RCPT TO Command Remote Overflow

Binary data 4352.prm...

Citadel SMTP <= 7.10 Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit http://www.inj3ct0r.com/sploits/9117.tar.gz 0day.today 2018-02...

Citadel SMTP 7.10 - Remote Overflow

Citadel SMTP 7.10 - Remote Overflow Citadel SMTP = 7.10 Remote Overflow Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...

Citadel SMTP 7.10 - Remote Overflow

Citadel SMTP = 7.10 Remote Overflow Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...

webcit-multi.txt

Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...

Session Riding and multiple XSS in WebCit

Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...

Citadel WebCit 7.027.10 - showuser?who Cross-Site Scripting

Citadel WebCit 7.027.10 - showuser?who Cross-Site Scripting source: https://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently saniti...

Citadel WebCit 7.02/7.10 - 'showuser?who' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may all...

Citadel/UX BBS 6.07 Remote Exploit

No description provided by source. / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include sys/types.h include sys/stat.h include sys/socket.h include net/if.h include netinet/in.h include netinet/tcp.h include arpa/inet.h include stdio.h include string.h include unistd.h include...

CVE-2004-1933

The CVE-2004-1933 entry affects Citadel/UX versions 5.00–6.14. The underlying issue is that the database directory and files are installed with world-read permissions, enabling local users to bypass access controls and read messages that should be restricted. This is described consistently across...

CVE-2004-1933

Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...

CVE-2004-1933: Undefined Security Weakness

Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...

CVE-2004-1705

Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username...

CVE-2004-1705

CVE-2004-1705 affects Citadel/UX 6.23 and earlier, where a buffer overflow in the remote USER command can be triggered by a crafted username. This vulnerability can cause a denial of service and, per Nessus/related sources, could allow arbitrary code execution on affected servers. The issue origi...