Important: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNT...

News Server (NNTP) Anonymous Read Access

The remote NNTP server seems to be open to outsiders. Some people like open NNTP servers as they allow one to read Usenet news articles anonymously. Unwanted connections could waste your bandwidth. Note that it is very common for NNTP servers to use IP-based authentication so this may be a false...

Fedora Update for newsx FEDORA-2008-6319

Check for the Version of newsx OpenVAS Vulnerability Test Fedora Update for newsx FEDORA-2008-6319 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for newsx FEDORA-2008-6321

Check for the Version of newsx OpenVAS Vulnerability Test Fedora Update for newsx FEDORA-2008-6321 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Kerio MailServer/Connect Detection (HTTP, SMTP, POP3, IMAP, NNTP)

This script will detect the version of Kerio MailServer or Connect on the remote host. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Gentoo Security Advisory GLSA 200807-15 (pan)

The remote host is missing updates announced in advisory GLSA 200807-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200611-18 (tin)

The remote host is missing updates announced in advisory GLSA 200611-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200502-05 (newspost)

The remote host is missing updates announced in advisory GLSA 200502-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: leafnode

The remote host is missing an update to the system as announced in the referenced advisory. VID 66dbb2ee-99b8-45b2-bb3e-640caea67a60 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

mozilla -- heap overflow in NNTP handler

The remote host is missing an update to the system as announced in the referenced advisory. VID 3fbf9db2-658b-11d9-abad-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

mozilla -- heap overflow in NNTP handler

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 1622-1] New newsx packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1622-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 31, 2008 http://www.debian.org/security/faq -...

[SECURITY] Fedora 9 Update: newsx-1.6-9.fc9

Newsx is an NNTP client that will connect to a remote NNTP server and post outgoing news articles batched by the news system e.g. INN, as well as fetch incoming articles...

[SECURITY] Fedora 8 Update: newsx-1.6-8.fc8

Newsx is an NNTP client that will connect to a remote NNTP server and post outgoing news articles batched by the news system e.g. INN, as well as fetch incoming articles...

MS Windows NNTP Service (XPAT) Denial of Service Exploit (MS04-036)

No description provided by source. -- IIS NNTP Service XPAT command heap overflow proof of concept Author: Lucas Lavarello lucas at coresecurity dot com Juliano Rizzo juliano at coresecurity dot com Copyright c 2001-2004 CORE Security Technologies, CORE SDI Inc. All rights reserved. THIS SOFTWARE...

Microsoft IIS文件更改通知本地权限提升漏洞（MS08-005）

BUGTRAQ ID: 27101 CVECAN ID: CVE-2008-0074 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS处理FTPRoot、NNTPFile\Root和WWWRoot文件夹中文件变化通知的方式存在本地权限提升漏洞，成功利用这个漏洞的攻击者可以在本地系统安全环境中执行任意指令。 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 5.1 Microsoft IIS 5.0 临时解决方法： 在Windows...

Debian Security Advisory DSA 876-1 (lynx-ssl)

The remote host is missing an update to lynx-ssl announced via advisory DSA 876-1. Ulf Härnhammar discovered a buffer overflow in lynx, a text-mode browser for the WWW that can be remotely exploited. During the handling of Asian characters when connecting to an NNTP server lynx can be tricked to...

Debian: Security Advisory (DSA-874-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 812-1 (turqstat)

The remote host is missing an update to turqstat announced via advisory DSA 812-1. Peter Karlsson discovered a buffer overflow in Turquoise SuperStat, a program for gathering statistics from Fidonet and Usenet, that can be exploited by a specially crafted NNTP server. For the old stable...

Microsoft Outlook Express和Windows Mail NNTP协议回应数据堆溢出漏洞（MS07-056）

BUGTRAQ ID: 25908 CVECAN ID: CVE-2007-3897 Outlook Express和Windows Mail都是Windows操作系统所捆绑的邮件和新闻组客户端。NNTP（网络新闻传输协议）是用于读取和张贴Usenet文章的协议。 Windows Mail和Outlook Express在处理NNTP回复时存在堆溢出漏洞，恶意NNTP服务器可能利用此漏洞控制用户系统。 如果服务器返回了多于客户端所请求的数据，就可能将攻击者可控的值储存到所分配的内存范围之外，覆盖控制结构，导致执行任意指令。 Microsoft Outlook Express 6.0 SP...