Debian DSA-064-1 : w3m - buffer overflow

SecureNet Service reported that w3m a console web browser has a buffer overflow in its MIME header parsing code. This could be exploited by an attacker if by making a web-server a user visits return carefully crafted MIME headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Debian DSA-081-1 : w3m - Buffer Overflow

In SNS Advisory No. 32 a buffer overflow vulnerability has been reported in the routine which parses MIME headers that are returned from web servers. A malicious web server administrator could exploit this and let the client web browser execute arbitrary code. w3m handles MIME headers included in...

CVE-1999-1199

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service resource exhaustion via a large number of MIME headers with the same name, aka the "sioux" vulnerability...

CVE-1999-1199

The CVE-1999-1199 entry concerns Apache HTTP Server 1.3.1 and earlier. A remote attacker can trigger a denial of service by sending a large number of MIME headers with the same name (the so‑called “sioux” vulnerability). The NVD entry assigns a base score of 10.0 (HIGH) with NETWORK attack vector...

CVE-2002-1307

Cross-site scripting vulnerability XSS in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name...

Buffer overflow in Eudora

Buffer overflow on MIME headers parsing...

Advisory CA-2001-36 Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers

CERT Advisory CA-2001-36 Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers Original release date: December 19, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Microsoft Internet...

[SECURITY] [DSA 081-1] New w3m packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 081-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Packages : w3m, w3m-ssl...

Buffer Overflows in various email clients

Overview Buffer Overflows in several MIME headers affect a large number of electronic mail clients. Description A variety of electronic mail clients circa 1998 are vulnerable to buffer overflow attacks in the code that processes MIME headers. See the vendor statements referenced below for details...

CVE-1999-0926

Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...

CVE-1999-0926

Technical details beyond the minimal description are not publicly provided in the supplied documents. Monitor for updates on affected products, versions, and fixes.

Переполнение буфера в w3m (buffer overflow)

переполнение буфера при разборе MIME-заголовков ответа сервера...

Exchange Malformed MIME Header Handling DoS

The remote Exchange server seems to be vulnerable to a flaw that lets malformed MIME headers crash it. Nessus did not actually test for these flaws - it just relied on the banner to identify them. Therefore, this warning may be a false positive - especially since the banner DOES NOT CHANGE if the...

CVE-2000-0196

The CVE-2000-0196 entry concerns the Linux nmh package’s mhshow utility. A vulnerability in mhshow’s handling of MIME headers can cause a buffer overflow, enabling remote command execution by an attacker via a crafted email message. The description explicitly states that this allows remote attack...

CVE-2000-0196

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message...

CVE-2000-0196

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message...

CVE-1999-0925

CVE-1999-0925 affects UnityMail; the vulnerability allows remote attackers to cause a denial-of-service by sending a large number of MIME headers. The provided documents do not specify vulnerable versions, root cause details beyond the MIME header flood, or remediation steps.

CVE-1999-0925

UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers...

CVE-1999-0926

Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...

CVE-1999-0925

UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers...