SquirrelMail多个表单跨站请求伪造漏洞

CVECAN ID: CVE-2009-2964 SquirrelMail是一款PHP编写的WEBMAIL程序。 SquirrelMail没有正确地过滤用户向多个表单（发送消息、更改偏好等）所提交的内容，远程攻击者可以通过跨站请求伪造攻击执行删除邮件、发送邮件等操作。以下是受影响的页面： functions/mailboxdisplay.php src/addrbooksearchhtml.php src/addressbook.php src/compose.php src/folders.php src/folderscreate.php src/foldersdelete.php...

openSUSE Security Update : postfix (postfix-133)

A local privilege escalation vulnerability as well as a mailbox ownership problem has been fixed in postfix. CVE-2008-2936 and CVE-2008-2937 have been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

Novell Groupwise fails to properly sanitize emails.

Affected product ---------------- Novell Groupwise webaccess Affected software: 7.x and 8.0 Vulnerability details --------------------- Groupwise WebAccess implements a security parser designed to prevent embedded scripts in HTML emails from executing in the users's browser. Unfortunately this...

Ubuntu Update for postfix vulnerability USN-636-1

Ubuntu Update for Linux kernel vulnerabilities USN-636-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6361.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postfix vulnerability USN-636-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-487-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Alpine tmail and dmail Buffer Overflow Vulnerabilities (Windows)

The host has Alpine installed and is prone to Buffer Overflow Vulnerabilities. OpenVAS Vulnerability Test $Id: gbalpinetmailndmailbofvulnwin.nasl 5370 2017-02-20 15:24:26Z cfi $ Alpine tmail and dmail Buffer Overflow Vulnerabilities Windows Authors: Veerendra GG Copyright: Copyright c 2008...

UW-IMAP < 2007d.404 Multiple Utility Mailbox Name Overflow

Binary data 4730.prm...

Dovecot ACL Plugin Security Bypass Vulnerabilities

This host has Dovecot ACL Plugin installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbdovecotmultsecbypassvuln.nasl 5158 2017-02-01 14:53:04Z mime $ Dovecot ACL Plugin Security Bypass Vulnerabilities Authors: Chandan S Copyright: Copyright c 2008...

Dovecot ACL Plugin Security Bypass Vulnerabilities

Dovecot ACL Plugin is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

dovecot -- ACL plugin bypass vulnerabilities

Timo Sirainen reports in dovecot 1.1.4 release notes: ACL plugin fixes: Negative rights were actually treated as positive rights. 'k' right didn't prevent creating parent/child/child mailbox. ACL groups weren't working...

Gentoo Security Advisory GLSA 200808-12 (postfix)

The remote host is missing updates announced in advisory GLSA 200808-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wordpress261-admin.txt

!/usr/bin/php =5.2.1 you'll need to be as well, in case server is wp261php520 php-5.2.1/php createtables.php wp261php521 ------------------------------------------------------------- $BLOG = $SERVER'argv'1; echo "+ w0rdpress 2.6.1. admin takeover, iso 0808\n"; if!$BLOG echo "! Usage:...

Debian Security Advisory DSA 1629-1 (postfix)

The remote host is missing an update to postfix announced via advisory DSA 1629-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian: Security Advisory (DSA-1629-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Postfix 2.6-20080814 - 'symlink' Local Privilege Escalation

!/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf mailspooldirectory" to obtain this user=root target=/etc/passwd...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : postfix vulnerability (USN-636-1)

Sebastian Krahmer discovered that Postfix was not correctly handling mailbox ownership when dealing with Linux's implementation of hardlinking to symlinks. In certain mail spool configurations, a local attacker could exploit this to append data to arbitrary files as the root user. The default...