Debian DSA-2250-1 : citadel - denial of service

Wouter Coekaerts discovered that the Jabber server component of Citadel, a complete and feature-rich groupware server, is vulnerable to the so-called'billion laughs' attack because it does not prevent entity expansion on received data. This allows an attacker to perform denial of service attacks...

[SECURITY] [DSA 2250-1] citadel security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...

Citadel Jabber server / Jabberd / ejabberd DoS

DoS on XML data parsing...

[SECURITY] [DSA 2250-1] citadel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...

DSA-2250-1 citadel - denial of service

Bulletin has no description...

Debian DSA-1752-1 : webcit - format string vulnerability

Wilfried Goesgens discovered that WebCit, the web-based user interface for the Citadel groupware system, contains a format string vulnerability in the minicalendar component, possibly allowing arbitrary code execution CVE-2009-0364 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 1752-1] New webcit packages fix potential remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1752-1 [email protected] http://www.debian.org/security/ Florian Weimer March 23, 2009 http://www.debian.org/security/faq -...

DSA-1752-1 webcit - potential remote code execution

Bulletin has no description...

Design/Logic Flaw

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3930

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3930

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3930

CVE-2008-3930 affects Citadel Server 7.37. The vulnerability arises from migrate_aliases.sh allowing local users to overwrite arbitrary files via a symlink attack on a temporary file. The description and multiple referenced records confirm the local-privilege escalation/vector, with impact statem...

CVE-2008-3930

Removed by vendor...

FreeBSD Ports: gatekeeper

The remote host is missing an update to the system as announced in the referenced advisory. VID 4c005a5e-2541-4d95-80a0-00c76919aa66 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gatekeeper

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Citadel/UX Remote Denial of Service Exploit (PoC)

No description provided by source. / citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 / 10.0.0 by CoKi [email protected] No System Group - http://www.nosystem.com.ar / include stdio.h include stdlib.h include unistd.h include errno.h include string....

Citadel/UX <= 6.27 Remote Root Format String Exploit

No description provided by source. / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h host options options: -h arg host or IP -t arg type of target system -l targets list -g arg syslog GOT address -r arg RET address coki@nosystem:/audit$ ./citadelfsexp -h...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...