29 matches found
CVE-2008-3177
Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...
CVE-2008-3177
Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...
Debian Security Advisory DSA 1232-1 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 1232-1. Stephen Gran discovered that malformed base64-encoded MIME attachments can lead to denial of service through a null pointer dereference. OpenVAS Vulnerability Test $Id: deb12321.nasl 6616 2017-07-07 12:10:49Z cfisch...
CVE-2002-2331
W3Mail 1.0.2 through 1.0.5 with server side scripting SSI enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the...
CVE-2002-2331
CVE-2002-2331 affects W3Mail 1.0.2–1.0.5 with server-side scripting (SSI) enabled in the attachments directory. The vulnerability arises from insufficient restrictions on attachment file types, enabling remote attackers to execute arbitrary code by sending code within MIME attachments and then re...
DSA-1232-1 clamav
Bulletin has no description...
CVE-2005-0926
Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attachments with MIME-encoded file names...
Fresh hole in W3Mail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nth Dimension Security Advisory NDSA20021112 Date: 12th November 2002 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: W3Mail up to and including 1.0.6 http://www.w3mail.org...
Medium security hole affecting W3Mail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I believe I've found a medium level security hole relating to the way W3Mail stores MIME attachments. I contacted the authors CascadeSoft - http://www.cascadesoft.com/ on the 19th, offering them 14 days to produce a fix, but have had no reply to...