[ MDVSA-2009:078 ] evolution-data-server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:078 http://www.mandriva.com/security/ Package : evolution-data-server Date : March 23, 2009 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A wrong handling of signed Secure/Multipurpose Internet Mail...

evolution-data-server: insufficient checking of NTLM authentication challenge packets

The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...

evolution-data-server: insufficient checking of NTLM authentication challenge packets

The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...

PT-2008-5350 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 Gold through SP4 Microsoft Windows XP versions Gold through SP3 Microsoft Windows Server 2003 versions SP1 and SP2 Microsoft Windows Vista versions Gold and SP1 Microsoft Windows Server 2008 Description: A remo...

Directory traversal

Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...

CVE-2008-0803

Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...

CVE-2008-0803

CVE-2008-0803 describes multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9. The issue allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the sys_conf[path][real] parameter, targeting a long list of vulnerable files under modules\class\db\ ...

CVE-2008-0803

Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...

LookStrike Lan Manager 0.9 Remote / Local File Inclusion Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 RemoteLocal File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91...

LookStrike Lan Manager 0.9 Remote / Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== LookStrike Lan Manager 0.9 Remote / Local File Inclusion Vulnerabilities ========================================================================...

LookStrike Lan Manager 0.9 - Local/Remote File Inclusion

--==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 Remote\Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: LookStrike Lan Manager v0....

lookstrike-rfilfi.txt

--==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 Remote\Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: LookStrike Lan Manager v0....

LookStrike Lan Manager 0.9 - LocalRemote File Inclusion

LookStrike Lan Manager 0.9 - LocalRemote File Inclusion --==+================================================================================+==-- --==+ LookStrike Lan Manager v0.9 Remote\Local File Inclusion +==--...

Debian Security Advisory DSA 463-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 463-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

security flaw

Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...

security flaw

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...

security flaw

Multiple unknown vulnerabilities in the 1 AIM, 2 LDAP, 3 FibreChannel, 4 GSMMAP, 5 SRVLOC, and 6 NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash...

USN-86-1: cURL vulnerability

infamous41md discovered a buffer overflow in cURL's NT LAN Manager NTLM authentication handling. By sending a specially crafted long NTLM reply packet, a remote attacker could overflow the reply buffer. This could lead to execution of arbitrary attacker specified code with the privileges of the...

security flaw

The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via a malformed NTLM type 3 message that triggers a NULL dereference...

squid -- denial-of-service vulnerabilities

The Squid team reported several denial-of-service vulnerabilities related to the handling of DNS responses and NT Lan Manager messages. These may allow an attacker to crash the Squid cache...