citadel.advisory-04.txt

------------------------------------------------- No System Group - Advisory 04 - 28/07/04 ------------------------------------------------- Program: Citadel/UX Homepage: http://www.citadel.org Operating System: Linux and Unix-Compatible Vulnerable Versions: Citadel/UX v6.23 and prior Risk: Mediu...

Citadel/UX 6.20 fixes local permissions vulnerability

Citadel/UX Security Advisory 2004-01 1. Topic: Updated Citadel/UX package fixes permissions problem which could allow local users direct access to the Citadel/UX database. 2. Relevant releases/architectures: Citadel/UX 5.00 - 6.14, all architectures 3. Problem description: Citadel/UX is a high...

Citadel/UX weak permissions

Messageboxes are world readable...

CVE-2004-1933

Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...

Citadel/UX BBS 6.07 Remote Exploit

Exploit for linux platform in category remote exploits ================================== Citadel/UX BBS 6.07 Remote Exploit ================================== / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include...

Citadel/UX BBS 6.07 - Remote Overflow

/ Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 define RET 0xbfffaf20 define CITADELPORT...

Multiple vulnerabilites in Citadel/UX

Security Vulnerability Advisory Product: Citadel/UX BBS Vulnerable versions: 6.07 probably previous versions Non-vulnerable version: 6.08 Vendor: Citadel www.citadel.org Platforms: Linux/UNIX/Win32 Impact: Remote code execution / privilege escalation Advisory: CLIVITT-2003-4 Authors: Carl Livitt...

Multiple vulnerabilites in Citadel/UX

Security Vulnerability Advisory Product: Citadel/UX BBS Vulnerable versions: 6.07 probably previous versions Non-vulnerable version: 6.08 Vendor: Citadel www.citadel.org Platforms: Linux/UNIX/Win32 Impact: Remote code execution / privilege escalation Advisory: CLIVITT-2003-4 Authors: Carl Livitt...

CVE-2002-0432

Buffer overflow in 1 lprintf and 2 cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...

CVE-2002-0432: Undefined Security Weakness

Buffer overflow in 1 lprintf and 2 cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server...