[SECURITY] [DSA-342-1] New mozart packages fix unsafe mailcap configuration

-------------------------------------------------------------------------- Debian Security Advisory DSA 342-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 7th, 2003 http://www.debian.org/security/faq -...

DSA-342 mozart - unsafe mailcap configuration

Bulletin has no description...

CVE-2003-0214

run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2003-0214

run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0214

CVE-2003-0214 affects mime-support (Debian) up to version 3.22; run-mailcap can overwrite arbitrary files via a symlink attack on temporary files due to insecure temporary file handling. Debian issued DSAs 292-1/292-2/292-3 to fix mime-support. OpenVAS/NESSUS entries note the system may be missin...

CVE-2003-0214: Undefined Security Weakness

run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-1999-1183: Undefined Security Weakness

System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...

SGI systems may execute commands embedded in mail messages

Overview Some SGI systems produced circa 1998 allowed an intruder to send mail that would execute commands when the reader opened the message. Description On some SGI systems, Netscape is bundled with IRIX 6.3 and 6.4 and is used as the default web browser and mail reader. On these systems, the...

CVE-1999-0365

The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry...

CVE-1999-0365: Undefined Security Weakness

The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry...

pine4.10-remote.txt

Date: Mon, 8 Feb 1999 00:22:17 +0100 From: Michal Zalewski To: [email protected] Subject: remote exploit on pine 4.10 - neverending story? Affected systems: ----------------- Any Unx system running 'pine' up to version 4.10 latest. Compromise: ----------- Remote execution of arbitrary code whe...

CVE-1999-0365

The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry...

PT-1999-1053 · Metamail · Metamail

Name of the Vulnerable Software and Affected Versions: metamail affected versions not specified Description: The issue allows remote command execution using shell metacharacters that are not quoted in a mailcap entry. Recommendations: At the moment, there is no information about a newer version...