Lucene search
+L

1953 matches found

OSV
OSV
•added 2010/09/24 7:00 p.m.•14 views

CVE-2010-3304

The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs...

6.3AI score
SaveExploits0References11
Debian CVE
Debian CVE
•added 2010/09/24 6:00 p.m.•54 views

CVE-2010-3304

The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs...

6.4CVSS6.3AI score0.0271EPSS
SaveExploits0
CVE
CVE
•added 2010/09/24 6:00 p.m.•94 views

CVE-2010-3304

CVE-2010-3304 affects Dovecot 1.2.x (before 1.2.13). In certain configurations, the ACL plugin propagates INBOX ACLs to newly created mailboxes, potentially allowing remote attackers to read mailboxes with unintended weak ACLs. Remediation: upgrade to Dovecot 1.2.13 or later (or apply relevant pa...

6.4CVSS5.2AI score0.0271EPSS
SaveExploits0References10Affected Software1
UbuntuCve
UbuntuCve
•added 2010/09/24 12:00 a.m.•37 views

CVE-2010-3304

The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs...

6.4CVSS5.9AI score0.0271EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/09/24 12:00 a.m.•3 views

CVE-2010-3304: Undefined Security Weakness

The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs...

6.4CVSS5.8AI score0.0271EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
•added 2010/08/24 12:00 a.m.•6 views

Preemptive Protection against Novell GroupWise Internet Agent IMAP Service Stack Buffer Overflow

A buffer overflow vulnerability exists in Novell GroupWise Internet Agent, a client-server collaborative software and email system provided by Novell. The vulnerability is within the IMAP component of the GroupWise Internet Agent service and is due to a boundary error while handling provided...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2010/07/01 12:00 a.m.•38 views

Fedora 13 : exim-4.72-1.fc13 (2010-9524)

This update fixes the following security flaws: CVE-2010-2023 exim: hard-link following vulnerability in mailbox handling CVE-2010-2024 exim: race condition when MBX locking is enabled Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

4.4CVSS6.7AI score0.0028EPSS
SaveExploits0References5
OSV
OSV
•added 2010/06/07 5:12 p.m.•9 views

DEBIAN-CVE-2010-2024

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/...

4.4CVSS7AI score0.0028EPSS
SaveExploits0References1
OSV
OSV
•added 2010/06/07 5:12 p.m.•8 views

DEBIAN-CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the stnlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file...

4.4CVSS6.9AI score0.0028EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2010/06/07 2:00 p.m.•46 views

CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the stnlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file...

4.4CVSS7AI score0.0028EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2010/06/07 12:00 a.m.•36 views

CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the stnlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file...

4.4CVSS7AI score0.0028EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2010/04/06 12:00 a.m.•30 views

Ubuntu Update for emacs22, emacs23 vulnerability USN-919-1

Ubuntu Update for Linux kernel vulnerabilities USN-919-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9191.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for emacs22, emacs23 vulnerability USN-919-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

4.4CVSS6.5AI score0.00324EPSS
SaveExploits0References2
OSV
OSV
•added 2010/04/05 3:30 p.m.•8 views

DEBIAN-CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

4.4CVSS6.1AI score0.00324EPSS
SaveExploits0References1
OSV
OSV
•added 2010/04/05 3:30 p.m.•10 views

CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

6.5AI score
SaveExploits0References7
Prion
Prion
•added 2010/04/05 3:30 p.m.•26 views

Design/Logic Flaw

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

4.4CVSS6.7AI score0.00324EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2010/04/05 3:15 p.m.•40 views

CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

6.1AI score0.00324EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2010/04/05 3:15 p.m.•54 views

CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

4.4CVSS5.1AI score0.00324EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/05 12:00 a.m.•2 views

CVE-2010-0825: Undefined Security Weakness

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

4.4CVSS6AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2010/02/04 7:00 p.m.•33 views

CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to 1 access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or 2 read device configuration information via...

6.7AI score0.02007EPSS
SaveExploits0References3
Fedora
Fedora
•added 2009/09/24 5:23 a.m.•28 views

[SECURITY] Fedora 11 Update: cyrus-imapd-2.3.15-1.fc11

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

7.5CVSS0.9AI score0.0404EPSS
SaveExploits0
Rows per page
Query Builder