CVE-2005-1335

Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via 1 chfn, 2 chpass, and 3 chsh, which "use external helper programs in an insecure manner."...

CVE-2005-0142

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such a...

GLSA-200501-35 : Evolution: Integer overflow in camel-lock-helper

The remote host is affected by the vulnerability described in GLSA-200501-35 Evolution: Integer overflow in camel-lock-helper Max Vozeler discovered an integer overflow in the camel-lock-helper application, which is installed as setgid mail by default. Impact : A local attacker could exploit this...

security flaw

Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...

CVE-2005-0102

Evolution 2.0.2 and earlier is affected by CVE-2005-0102 due to an integer overflow in camel-lock-helper. A length value of -1 can cause a zero-byte allocation and a buffer overflow, enabling arbitrary code execution by local users or remote malicious POP3 servers. The issue is cited across multi...

CVE-2005-0102: Integer Overflow or Wraparound

Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow...

CVE-2005-0096

Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...

CVE-2005-0096

Memory leak in the NTLM fakeauthauth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service memory consumption...

Novell Evolution groupware client integer overflow vulnerability

Buffer overflow in camel-lock-helper application...

[ GLSA 200501-35 ] Evolution: Integer overflow in camel-lock-helper

Gentoo Linux Security Advisory GLSA 200501-35 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

USN-69-1: Evolution vulnerability

Max Vozeler discovered an integer overflow in camel-lock-helper. An user-supplied length value was not validated, so that a value of -1 caused a buffer allocation of 0 bytes; this buffer was then filled by an arbitrary amount of user-supplied data. A local attacker or a malicious POP3 server coul...

CVE-2005-0102

Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow...

DEBIAN-CVE-2005-0102

Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow...

PT-2005-1210 · Evolution +1 · Evolution +1

Name of the Vulnerable Software and Affected Versions: Evolution versions 2.0.2 and earlier Description: The issue allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1. This leads to a zero byte memory allocation and a buffer overflow in the...

Opened attachments are temporarily saved world-readable — Mozilla

Mozilla software released after March 2004 saves some temporary files with world-readable permissions. In the browser this is primarily content fed to helper applications for example, PDF files, and in the mail clients it is attachments...

evolution -- arbitrary code execution vulnerability

Martin Joey Schulze reports: Max Vozeler discovered an integer overflow in the helper application camel-lock-helper which runs setuid root or setgid mail inside of Evolution, a free groupware suite. A local attacker can cause the setuid root helper to execute arbitrary code with elevated privileg...

CVE-2005-0096

CVE-2005-0096 affects Squid 2.5.STABLE7 and earlier, where a memory leak in the NTLM fakeauth_auth helper can cause a denial of service through unbounded memory growth. The vulnerability is triggered remotely via the network. Connected advisories/entries show remediation efforts for Squid (e.g., ...

CVE-2004-2291

Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut link to execute the target script...

CVE-2004-0485

The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file .dmg to be mounted as a disk volume...

FreeBSD : Buffer overflow in Squid NTLM authentication helper (183)

The following package needs to be updated: squid %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6f955451ba5411d8b88c000d610a3b12.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...