CVE-2002-2325

The CVE-2002-2325 entry concerns the c-client library used by IMAP (as in Pine 4.20–4.44). It describes a denial of service where a MIME-encoded email with a Content-Type header containing an empty boundary field can crash the client. The vulnerability is tied to the software versions mentioned (...

CVE-2003-1331

Stack-based buffer overflow in the mysqlrealconnect function in the MySql client library libmysqlclient 4.0.13 and earlier allows local users to execute arbitrary code via a long socket name, a different vulnerability than CVE-2001-1453...

Neon LibNeon非ASCII字符URI数据远程拒绝服务漏洞

Neon LibNeon存在远程拒绝服务问题。 Neon LibNeon当处理包含非ASCII字符的URI数据时存在漏洞，攻击者可以利用漏洞使使用此库的应用程序崩溃，造成拒绝服务攻击。 Neon Client Library 0.26.2 Neon Client Library 0.26.1 Neon Client Library 0.26 MandrakeSoft Linux Mandrake 2007.0 x8664 MandrakeSoft Linux Mandrake 2007.0 Mandriva Linux可参考如下公告：...

CVE-2006-5717

Multiple cross-site scripting XSS vulnerabilities in Zend Google Data Client Library ZendGData Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in 1 basedemo.php and 2 calenderdemo.php in samples/, and other unspecified files...

Multiple XSS Vulnerabilities in Zend Google Data Client Library Preview 0.2.0

Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0008 Status: Partial Date: 2006/11/01 Summary: Armorize-ADV-2006-0008 discloses multiple cross-site scripting vulnerabilities that are found in the sample codes of Zend Google Data Client Library...

Design/Logic Flaw

The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...

CVE-2006-1017

The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...

CVE-2006-1017

The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...

CVE-2006-1017

CVE-2006-1017 corresponds to issues in the PHP c-client/imap handling. The connected OpenVAS entry references “PHP

(PHP) imap functions bypass safemode and open_basedir restrictions

Vulnerability in c-client library tested with versions 2000,2001,2004, mailopen could be used to open stream to local files. For php and imap module imapopen allow to bypass safemode and openbasedir restrictions. Use imapbody or others to view a file and imaplist to recursively list a directory...

cUrl / licurl HTTP client library buffer overflow

Off-by-one and off-by-two overflows in URL parsing...

RHEL 2.1 / 3 : imap (RHSA-2005:850)

An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protoco...

Low: Red Hat Security Advisory: pine security update

An updated Pine package is now available for Red Hat Enterprise Linux 2.1 to fix a denial of service attack. Pine is an email user agent. The c-client IMAP client library, as used in Pine 4.44 contains an integer overflow and integer signedness flaw. An attacker could create a malicious IMAP serv...

CVE-2004-0642

Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...

Neon < 0.24.6 WebDAV Client Library ne_rfc1036_parse Function Heap Overflow

Binary data 1780.prm...

RHEL 2.1 : mysql (RHSA-2003:094)

Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...

Important: Red Hat Security Advisory: cadaver security update

An updated cadaver package that fixes a vulnerability in neon exploitable by a malicious DAV server is now available. cadaver is a command-line WebDAV client that uses inbuilt code from neon, an HTTP and WebDAV client library. Versions of the neon client library up to and including 0.24.4 have be...

Neon WebDAV Client Library 0.2x - Format String

source: https://www.securityfocus.com/bid/10136/info It has been reported that the Neon client library is prone to multiple remote format string vulnerabilities. This issue is due to a failure of the application to properly implement format string functions. Ultimately this vulnerability could...

Important: Red Hat Security Advisory: : Updated MySQL packages fix vulnerabilities

Updated MySQL server packages fix both a double-free security vulnerability and a root exploit security vulnerability. Updated 1 May 2003 Added updated packages for Red Hat Linux 9, which is vulnerable to CAN-2003-0150. MySQL is a multi-user, multi-threaded SQL database server. A double-free...

Important: Red Hat Security Advisory: apache, openssl, php security update for Stronghold

Updated versions of Stronghold 3.0 are available to fix a number of vulnerabilities in OpenSSL, Apache, and PHP. Stronghold 3.0 contains a number of open source technologies such as OpenSSL, Apache, and PHP. The following paragraphs describe a number of issues that have been found in versions of...