51 matches found
[SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 848-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 848-1 [email protected] http://www.debian.org/security/ Martin Schulze October 8th, 2005 http://www.debian.org/security/faq -...
DSA-848-1 masqmail - several
Bulletin has no description...
CVE-2005-2662
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...
CVE-2005-2663
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
CVE-2005-2662
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...
CVE-2005-2663
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
CVE-2005-2662
Summary (CVE-2005-2662) masqmail prior to 0.2.18 allows a remote attacker to execute arbitrary commands by sending crafted addresses in a failed delivery message. This is caused by improper sanitization during failed-delivery processing. In addition, CVE-2005-2663 involves a privilege-related iss...
CVE-2005-2663
CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...
CVE-2005-2662
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...
CVE-2005-2663
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
CVE-2005-2663
Removed by vendor...
CVE-2005-2662: Undefined Security Weakness
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...
CVE-2005-2663: Undefined Security Weakness
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
Multiple masqmail vulnerabilities
Unfiltered shell characters in the From: address, symbolic links problem during log file creation...
[Full-disclosure] MDKSA-2005:168 - Updated masqmail packages fix vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Update Advisory Package name: masqmail Advisory ID: MDKSA-2005:168 Date: September 20th, 2005 Affected versions: Multi Network Firewall 2.0 Problem Description: Jens Steube discovered two vulnerabilities in masqmail: When sendi...
Debian DSA-194-1 : masqmail - buffer overflows
A set of buffer overflows have been discovered in masqmail, a mail transport agent for hosts without permanent internet connection. In addition to this privileges were dropped only after reading a user-supplied configuration file. Together this could be exploited to gain unauthorized root access ...
CVE-2002-1279
Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file -C option...
CVE-2002-1279
CVE-2002-1279 is a local privilege escalation in Masqmail. Multiple buffer overflows in Masqmail’s conf.c affect Masqmail 0.1.x (before 0.1.17) and 0.2.x (before 0.2.15). Exploitation via specific entries in the configuration file (-C) can grant elevated rights to local users. Debian advisories c...