CVE-2005-1435

Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...

CVE-2005-1435

Open WebMail (OWM) before version 2.51 (20050430) is vulnerable to remote command execution when an authenticated user supplies a filename containing shell metacharacters. The root cause is failure to properly remove shell escapes from filenames before processing them, enabling arbitrary command ...

CVE-2005-1435

Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...

CVE-2005-1435: Undefined Security Weakness

Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...

Open Webmail < 2.51 20050430 Shell Escape Arbitrary Command Execution

Binary data 2875.prm...

CVE-2005-0445

Cross-site scripting XSS vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter logindomain in the login page...

Open WebMail openwebmail.pl logindomain Parameter XSS

The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script code in the context of a user's web browser. %NASLMINLEVEL 70300 This script was writte...

CVE-2005-0445

Open WebMail 2.x is affected by a Cross-Site Scripting (XSS) vulnerability in the logindomain parameter on the login page. The Open WebMail OpenVAS/Nessus entries confirm that insufficient validation of the logindomain input enables arbitrary script execution in a user’s browser. Related referenc...

CVE-2005-0445

Cross-site scripting XSS vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter logindomain in the login page...

CVE-2005-0445: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter logindomain in the login page...

[SA14253] Open WebMail Login Page Cross-Site Scripting Vulnerability

TITLE: Open WebMail Login Page Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA14253 VERIFY ADVISORY: http://secunia.com/advisories/14253/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Open WebMail 2.x http://secunia.com/product/3167/ DESCRIPTION: Ori...

CVE-2004-2458

Open WebMail 2.30 and earlier, when usesyshomedir is disabled or createsyshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories...

Open WebMail userstat.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the userstat.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on the target using the privileges under which the web server operates. For further...

CVE-2002-1385

Open WebMail vulnerability CVE-2002-1385 affects Open WebMail ≤ 1.81. Local users can trigger arbitrary code execution by supplying dot-dot sequences in a login name (e.g., in the sessionid parameter for openwebmail-abook.pl), which is used to locate a configuration file that can specify addition...

CVE-2002-1385

openwebmailinit in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. dot dot sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be...

CVE-2002-1385: Undefined Security Weakness

openwebmailinit in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. dot dot sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be...

Open WebMail Detection

The remote host is running Open WebMail, a webmail package written in Perl that provides access to mail accounts via POP3 or IMAP. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the Nessus Scripts License for details. include'deprecatednasllevel.inc'; include"compat.inc"; ...

Open WebMail vacation.pl Arbitrary Command Execution

The target is running at least one instance of Open WebMail in which the vacation.pl component fails to sufficiently validate user input. This failure enables remote attackers to execute arbitrary programs on a target using the privileges under which the web server operates. For further...

Open WebMail Multiple Content Header XSS

The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross- site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary JavaScript code by reading a MIME message with a specially crafted...

[Full-Disclosure] CSA-200402-1: Previous Open Webmail vulnerability is exploitable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cycom AB Security Advisory CSA-200402-1 www.cycom.se Advisory: Previous Open Webmail vulnerability is exploitable Date: Sat Feb 21 15:18:21 CET 2004, updated: Thu May 6 10:37:29 CEST 2004 Application: Open Webmail 2.20, 2.21 and 2.30 and -current...