Lucene search
+L

1823 matches found

securityvulns
securityvulns
•added 2009/09/07 12:00 a.m.•43 views

[SECURITY] [DSA 1881-1] New cyrus-imapd packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1881-1 [email protected] http://www.debian.org/security/ Nico Golde September 7th, 2009 http://www.debian.org/security/faq -...

0.2AI score
SaveExploits0
FreeBSD
FreeBSD
•added 2009/09/02 12:00 a.m.•32 views

cyrus-imapd -- Potential buffer overflow in Sieve

The Cyrus IMAP Server ChangeLog states: Fixed CERT VU336053 - Potential buffer overflow in Sieve...

4.4CVSS5.7AI score0.00483EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/07/29 12:00 a.m.•20 views

Gentoo Security Advisory GLSA 200907-09 (cyrus-sasl)

The remote host is missing updates announced in advisory GLSA 200907-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.7AI score0.08206EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/07/29 12:00 a.m.•37 views

Gentoo Security Advisory GLSA 200907-09 (cyrus-sasl)

The remote host is missing updates announced in advisory GLSA 200907-09. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

7.5CVSS9.5AI score0.08206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/07/21 12:00 a.m.•25 views

openSUSE Security Update : cyrus-sasl (cyrus-sasl-880)

This update of cyrus-sasl improves the output of function saslencode64 by appending a 0 for string termination. The impact depends on the application that uses saslencode64. CVE-2009-0688 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

7.5CVSS5AI score0.08206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/07/21 12:00 a.m.•17 views

openSUSE Security Update : cyrus-sasl (cyrus-sasl-880)

This update of cyrus-sasl improves the output of function saslencode64 by appending a 0 for string termination. The impact depends on the application that uses saslencode64. CVE-2009-0688 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

7.5CVSS5AI score0.08206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/07/13 12:00 a.m.•28 views

GLSA-200907-09 : Cyrus-SASL: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-09 Cyrus-SASL: Execution of arbitrary code James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact : A...

7.5CVSS5.9AI score0.08206EPSS
SaveExploits0References2
Gentoo Linux
Gentoo Linux
•added 2009/07/12 12:00 a.m.•38 views

Cyrus-SASL: Execution of arbitrary code

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact A remote...

7.5CVSS4.5AI score0.08206EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/06/30 12:00 a.m.•14 views

Ubuntu USN-790-1 (cyrus-sasl2)

The remote host is missing an update to cyrus-sasl2 announced via advisory USN-790-1. OpenVAS Vulnerability Test $Id: ubuntu7901.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7901.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-790-1 cyrus-sasl2 Authors:...

7.5CVSS0.5AI score0.08206EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2009/06/29 12:00 a.m.•16 views

Ubuntu: Security Advisory (USN-790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.08206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/06/25 12:00 a.m.•40 views

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : cyrus-sasl2 vulnerability (USN-790-1)

James Ralston discovered that the Cyrus SASL base64 encoding function could be used unsafely. If a remote attacker sent a specially crafted request to a service that used SASL, it could lead to a loss of privacy, or crash the application, resulting in a denial of service. Note that Tenable Networ...

7.5CVSS5.1AI score0.08206EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2009/06/24 6:24 p.m.•57 views

USN-790-1: Cyrus SASL vulnerability

James Ralston discovered that the Cyrus SASL base64 encoding function could be used unsafely. If a remote attacker sent a specially crafted request to a service that used SASL, it could lead to a loss of privacy, or crash the application, resulting in a denial of service...

7.5CVSS5.1AI score0.08206EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/06/23 12:00 a.m.•25 views

RedHat Security Advisory RHSA-2009:1116

The remote host is missing updates announced in advisory RHSA-2009:1116. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. It was discovered that the Cyrus SASL library cyrus-sasl does not always reliably terminate output from the saslencode...

7.5CVSS9.5AI score0.08206EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/06/23 12:00 a.m.•27 views

CentOS Security Advisory CESA-2009:1116 (cyrus-imapd)

The remote host is missing updates to cyrus-imapd announced in advisory CESA-2009:1116. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

7.5CVSS9.4AI score0.08206EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2009/06/23 12:00 a.m.•18 views

RedHat Security Advisory RHSA-2009:1116

The remote host is missing updates announced in advisory RHSA-2009:1116. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. It was discovered that the Cyrus SASL library cyrus-sasl does not always reliably terminate output from the saslencode...

7.5CVSS0.8AI score0.08206EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/06/23 12:00 a.m.•28 views

CentOS Security Advisory CESA-2009:1116 (cyrus-imapd)

The remote host is missing updates to cyrus-imapd announced in advisory CESA-2009:1116. CESA-2009:1116 64271 2 $Id: ovcesa20091116.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1116 cyrus-imapd Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

7.5CVSS0.3AI score0.08206EPSS
SaveExploits0
Cent OS
Cent OS
•added 2009/06/19 9:47 a.m.•64 views

cyrus security update

CentOS Errata and Security Advisory CESA-2009:1116 Updated cyrus-imapd packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain ...

7.5CVSS5.7AI score0.08206EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2009/06/19 12:00 a.m.•28 views

RHEL 4 / 5 : cyrus-imapd (RHSA-2009:1116)

Updated cyrus-imapd packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNT...

7.5CVSS5AI score0.08206EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2009/06/18 5:26 p.m.•39 views

Important: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNT...

7.5CVSS5.7AI score0.08206EPSS
SaveExploits0References2
Oracle linux
Oracle linux
•added 2009/06/18 12:00 a.m.•49 views

cyrus-imapd security update

2.3.7-2.2 - add -fno-strict-aliasing to cflags 2.3.7-2.1 - fix saslencode64's buffers 505427...

7.5CVSS3AI score0.08206EPSS
SaveExploits0
Rows per page
Query Builder