276 matches found
Citadel SMTP server RCPT TO buffer overflow
Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...
Citadel SMTP makeuserkey Function RCPT TO Command Remote Overflow
The remote server is running Citadel, an open source solution for email and collaboration. According to its version, the installation of Citadel on the remote host uses insufficient bounds-checking in its SMTP service during memory-copy operations when processing input to the RCPT TO command. An...
Buffer overflow
Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...
CVE-2008-0394
Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...
CVE-2008-0394
Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...
CVE-2008-0394
CVE-2008-0394 : A buffer overflow in Citadel SMTP Server (versions 7.10 and earlier) is triggered by a long RCPT TO command due to insufficient bounds checking in the makeuserkey function. Remote attackers could potentially execute arbitrary code. Multiple advisories confirm the vulnerability and...
Citadel < 7.11 makeuserkey Function RCPT TO Command Remote Overflow
Binary data 4352.prm...
Citadel SMTP <= 7.10 Remote Overflow Exploit
No description provided by source. Citadel SMTP = 7.10 Remote Overflow Exploit http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz...
Citadel SMTP 7.10 - Remote Overflow
Citadel SMTP = 7.10 Remote Overflow Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...
Citadel SMTP <= 7.10 Remote Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit http://www.inj3ct0r.com/sploits/9117.tar.gz 0day.today 2018-02...
Citadel SMTP 7.10 - Remote Overflow
Citadel SMTP 7.10 - Remote Overflow Citadel SMTP = 7.10 Remote Overflow Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...
webcit-multi.txt
Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...
Session Riding and multiple XSS in WebCit
Vendor contacted: 2007-06-24 Affects: Webcit 7.11 Fixed: 2007-07-06 WebCit 7.11 1. Background WebCit is the webfrontend to administer and use Citadel, which is an open-source groupware server. 2. Session Riding 2.I. Problem Description It is possible for an attacker to execute actions in the name...
Citadel WebCit 7.02/7.10 - 'showuser?who' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may all...
Citadel WebCit 7.027.10 - showuser?who Cross-Site Scripting
Citadel WebCit 7.027.10 - showuser?who Cross-Site Scripting source: https://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently saniti...
Citadel/UX BBS 6.07 Remote Exploit
No description provided by source. / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include sys/types.h include sys/stat.h include sys/socket.h include net/if.h include netinet/in.h include netinet/tcp.h include arpa/inet.h include stdio.h include string.h include unistd.h include...
CVE-2004-1933
Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...
CVE-2004-1933
The CVE-2004-1933 entry affects Citadel/UX versions 5.00–6.14. The underlying issue is that the database directory and files are installed with world-read permissions, enabling local users to bypass access controls and read messages that should be restricted. This is described consistently across...
CVE-2004-1705
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username...
CVE-2004-1705
CVE-2004-1705 affects Citadel/UX 6.23 and earlier, where a buffer overflow in the remote USER command can be triggered by a crafted username. This vulnerability can cause a denial of service and, per Nessus/related sources, could allow arbitrary code execution on affected servers. The issue origi...