[Full-disclosure] [Info Disclosure] Diesel PHP Job Site Latest Version

Subject: Info Disclosure Diesel PHP Job Site Latest Version Severity: Pretty Bad Title: Diesel PHP Job Site Latest Version Information Disclosure Home Page: http://www.dieselscripts.com/ Product Page: http://www.dieselscripts.com/diesel-job-site.html Date: May 17, 2006 Synopsis: ========= When an...

Crlf injection

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...

CVE-2006-0884

The WYSIWYG rendering engine "rich mail" editor in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which i...

Design/Logic Flaw

The WYSIWYG rendering engine "rich mail" editor in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which i...

CVE-2006-0884

The WYSIWYG rendering engine "rich mail" editor in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which i...

Buffer overflow

Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105...

CVE-2006-0528

The cairo library libcairo, as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service persistent client crash via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the...

CVE-2001-1504

The CVE-2001-1504 entry relates to Lotus Notes R5 Client 4.6, where a Lotus Notes object containing code in an event can be automatically executed when the user processes an e-mail message, enabling remote command execution. The vulnerability is rated CVSS v2 base score 7.5 (HIGH) with network at...

CVE-2004-1616

Links allows remote attackers to cause a denial of service memory consumption via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme...

CVE-2004-1521

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers...

GLSA-200501-18 : KDE FTP KIOslave: Command injection

The remote host is affected by the vulnerability described in GLSA-200501-18 KDE FTP KIOslave: Command injection The FTP KIOslave fails to properly parse URL-encoded newline characters. Impact : An attacker could exploit this to execute arbitrary FTP commands on the server and due to similiaritie...

CVE-2004-2247

Unknown vulnerability in the "admin of paypal email addresses" in AudienceConnect before 1.0.beta.21 has unknown impact and attack vectors...

CVE-2004-2226

Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets CSS document on the attacker's server...

CVE-2004-2166

The print-from-email feature in the Canon ImageRUNNER iR 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25...

CVE-2004-1272

Buffer overflow in the saveembeddedaddress function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message...

GLSA-200411-06 : MIME-tools: Virus detection evasion

The remote host is affected by the vulnerability described in GLSA-200411-06 MIME-tools: Virus detection evasion MIME-tools doesn't correctly parse attachment boundaries with an empty name boundary=''. Impact : An attacker could send a carefully crafted email and evade detection on some email...

Microsoft Outlook 2003 - Security Policy Bypass

Microsoft Outlook 2003 - Security Policy Bypass source: https://www.securityfocus.com/bid/11446/info Microsoft Outlook 2003 is reported prone to a security policy bypass vulnerability. It is reported that by including a base64 encoded image in an email and labeling that image in a sufficient...

CVE-2002-1198

Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack...

GLSA-200403-10 : Fetchmail 6.2.5 fixes a remote DoS

The remote host is affected by the vulnerability described in GLSA-200403-10 Fetchmail 6.2.5 fixes a remote DoS Fetchmail versions 6.2.4 and earlier can be crashed by sending a specially crafted email to a Fetchmail user. This problem occurs because Fetchmail does not properly allocate memory for...

GLSA-200405-07 : Exim verify=header_syntax buffer overflow

The remote host is affected by the vulnerability described in GLSA-200405-07 Exim verify=headersyntax buffer overflow When the option 'verify = headersyntax' is used in an ACL in the configuration file, Exim is vulnerable to a buffer overflow attack that can be triggered remotely by sending...