EUVD-2008-3915

Malware in sbrugna...

Malware exploit: Citadel Server V1.3.5.1

Type: Remote Code Execution Author: Xylitol import urllib import urllib2 Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability Work only on windows box def requesturl, params=None, method='GET': if method == 'POST': urllib2.urlopenurl, urllib.urlencodeparams.read elif method ==...

Citadel SMTP RCPT Remote Buffer Overflow - High Confidence (CVE-2008-0394)

The Citadel Server is a mail server product geared towards small and medium size organizations. The product implements POP3, IMAP4, and SMTP services. The SMTP server module is installed and started in a default installation. There exists a buffer overflow vulnerability in Citadel SMTP Server. Th...

CVE-2008-3930

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

Design/Logic Flaw

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3930

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3930

CVE-2008-3930 affects Citadel Server 7.37. The vulnerability arises from migrate_aliases.sh allowing local users to overwrite arbitrary files via a symlink attack on a temporary file. The description and multiple referenced records confirm the local-privilege escalation/vector, with impact statem...

CVE-2008-3930

Removed by vendor...

CVE-2008-3930: Improper Link Resolution Before File Access

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...