Debian Security Advisory DSA 1893-1 (cyrus-imapd-2.2 kolab-cyrus-imapd)

The remote host is missing an update to cyrus-imapd-2.2 kolab-cyrus-imapd announced via advisory DSA 1893-1. OpenVAS Vulnerability Test $Id: deb18931.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1893-1 cyrus-imapd-2.2 kolab-cyrus-imapd Authors: Thomas...

Debian: Security Advisory (DSA-1893-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1893-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 23, 2009 http://www.debian.org/security/faq -...

DSA-1893-1 cyrus-imapd-2.2 kolab-cyrus-imapd - arbitrary code execution

Bulletin has no description...

CVE-2008-4165

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

Design/Logic Flaw

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

The CVE-2008-4165 entry concerns Kolab Groupware Server 1.0.0. The vulnerable component is admin/user/create_user.php, which places a user password in an HTTP GET request. This allows local administrators and possibly remote attackers to obtain cleartext passwords by inspecting the ssl_access_log...

CVE-2008-4165: Undefined Security Weakness

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2007-4510

CVE-2007-4510 affects ClamAV before 0.91.2 (as used in Kolab Server 2.0–2.2beta1 and others). The root causes are NULL pointer dereferences in cli_scanrtf (libclamav/rtf.c) and in cli_html_normalise (libclamav/htmlnorm.c) triggered by a crafted RTF file or a crafted HTML document with a data: URI...

CVE-2007-4510: Undefined Security Weakness

ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service application crash via 1 a crafted RTF file, which triggers a NULL dereference in the cliscanrtf function in libclamav/rtf.c; or 2 a crafted HTML document wit...

CVE-2005-4828

CVE-2005-4828 affects Kolab Server 2.0.0 and 2.0.1. The issue occurs when a large email contains a dot placed incorrectly, causing kolabfilter to insert an additional dot. This can break clear-text signatures and attachments. The available sources note that it is not clear whether the issue cross...

CVE-2005-4828

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...

CVE-2005-4828: Undefined Security Weakness

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...

Mandrake Linux Security Advisory : kolab-resource-handlers (MDKSA-2006:013)

A problem exists in how the Kolab Server transports emails bigger than 8KB in size and if a dot '.' character exists in the wrong place. If these conditions are met, kolabfilter will double this dot and a modified email will be delivered, which could lead to broken clear-text signatures or broken...

Authentication flaw

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2006-0213

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2006-0213

Affected product: Kolab Server (versions 2.0.1, 2.0.2 and development builds before 2.1-20051215 and earlier). Root cause: when authenticating users via secure SMTP, credentials are written in plaintext to the postfix.log file. Impact: local users can read credentials and gain privileges. Details...

CVE-2006-0213

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2006-0213: Undefined Security Weakness

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...