UBUNTU-CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

Exim SMTP listener base64d function one-character buffer overflow

Added: 05/16/2018 CVE: CVE-2018-6789 BID: 103049 Background Exim is a mail transfer agent used on Unix-like operating systems. Problem Exim 5.90 and earlier are vulnerable to a one-character buffer overflow in the base64d function in the SMTP listener. Resolution Upgrade to Exim 4.90.1 or higher,...

samtools htslib library CRAM rANS codec buffer overflow vulnerability

The samtools htslib library is a C language library for high throughput sequencing data formats. cram rANS codec is one of the codecs. A buffer overflow vulnerability exists in the CRAM rANS codec in samtools htslib library version 1.4.0 and earlier. An attacker can exploit this vulnerability to...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

Buffer overflow

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

DEBIAN-CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

UBUNTU-CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

CVE-2017-1000206 affects samtools htslib (CRAM rANS codec) with buffer overflow in version 1.4.0 and earlier. The vulnerability could allow arbitrary code execution on impacted systems. Public sources in the connected set reference Linux distributions (Ubuntu, Red Hat, Debian/OSV) and security ad...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

CVE-2017-1000206

samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution...

IBM Domino IMAP Server Buffer Overflow Vulnerability

IBM Domino is prone to a buffer overflow vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

VulnCheck KEV: CVE-2007-1675

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...

Open-Xchange: Dovecot authentication is vulnerable to timing attacks.

Dear Dovecot bug bounty team, Dovecot is vulnerable to timing attacks, because the verifycredentials function in CRAM-MD5 performs a byte-by-byte comparison, which terminates early when two characters do not match. Summary --- Timing attacks are a type of side channel attack where one can discove...

DBMail 'dm_db.c' CRAM-MD5 Authentication Bypass Vulnerability

Dbmail is a collection of programs that allow retrieving and storing mail from databases and can use MySQL, PostgreSQL and SQLite as database backends. An authentication bypass vulnerability exists in DBMail, which can be exploited by an attacker to bypass the authentication mechanism and perform...

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow

No description provided by source. $Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Apple Mac OS X不安全身份验证漏洞(CVE-2013-5181)

BUGTRAQ ID: 63350 CVECAN ID: CVE-2013-5181 OS X（前称Mac OS X）是苹果公司为麦金塔电脑开发的专属操作系统的最新版本。 OS X 10.9之前版本“邮件”的自动配置功能内存在安全漏洞，对于支持CRAM-MD5身份验证的服务器选择了纯文本身份验证，可使远程攻击者通过嗅探网络，获取敏感信息。 0 Apple Mac OS X 10.9 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（msg00004）以及相应补丁: msg00004：APPLE-SA-2013-10-22-3 OS X Mavericks v10....

Authentication flaw

The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified servers that support CRAM-MD5 authentication, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-5181

Apple Mac OS X Mail’s auto-configuration (pre-10.9) may select plaintext authentication for servers that support CRAM-MD5, enabling remote sniffing of credentials. Affected: OS X Mail before 10.9. Root cause: plaintext auth chosen during auto-config. Impact: potential exposure of sensitive inform...