Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to...

MailMarshal Spam Quarantine Interface Arbitrary Account Password Retrieval

The remote host is running the Spam Quarantine Management web component of MailMarshal SMTP, a mail server for Windows. The version of the Spam Quarantine Management web component installed on the remote host fails to sanitize input to the 'emailTextBox' parameter of the 'Register.aspx' script...

PT-2007-5034 · Marshalsec · Mailmarshal Smtp

Name of the Vulnerable Software and Affected Versions: MailMarshal SMTP versions 6.2.0.x through 6.2.0.x Description: The password reset feature in the Spam Quarantine HTTP interface has an issue that allows remote attackers to modify arbitrary account information. This is achieved by exploiting...

NOD32 Antivirus Restore To Feature Local File Creation

The installed version of NOD32 reportedly allows a local user to restore a malicious file from NOD32's quarantine to an arbitrary directory to which the user otherwise has only read access. A local user can exploit this issue to gain admin/system privilege on the affected host. C Tenable Network...

CVE-2006-1649

The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions...

Design/Logic Flaw

The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions...

CVE-2006-1649

The CVE-2006-1649 issue affects ESET NOD32 prior to 2.51.26. The vulnerability lies in the product’s "restore to" feature during quarantine, which allows restoring a file to any directory that the invoking user can read. This enables local users to create new files despite directory write permiss...

CVE-2006-1649

The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. SPDX-FileCopyrightText: 2004 by DokFLeed Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MDaemon 8.0 - Content Filter Directory Traversal

source: https://www.securityfocus.com/bid/14400/info MDaemon server is prone to a directory traversal vulnerability due to improper sanitization of user input. Failure to sanitize the filename and path may result in compromise of the file system outside of the application's quarantine directory...

MDaemon Content Filter Traversal Arbitrary File Write

According to its banner, the version of MDaemon on the remote host is prone to a directory traversal flaw that can be exploited to overwrite files outside the application's quarantine directory provided MDaemon's attachment quarantine feature is enabled. %NASLMINLEVEL 70300 C Tenable Network...

Check Point InterSpect Detection

The remote host seems to be running Check Point InterSpect, an internet security gateway. The Nessus host is likely to have been put in quarantine, its activity will be dropped for 30 minutes by default. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15614;...

ZA Security Hole

Hello! I think, I discover some kind of security hole in ZoneAlaram - any version. The problem is hidding in E-mail Protection. Because I'm form Slovenia not Slovakia, our alphabet does have some letters with roof c - , s - , z - . And when the name of e-mail attachment contain any of these three...

NAI WebShield SMTP Management Agent SET_CONFIG Overflow

The remote NAI WebShield SMTP Management tool is vulnerable to a buffer overflow which allows an attacker to gain execute arbitrary code on this host when it is issued a too long argument as a configuration parameter. In addition to this, it allows an attacker to disable the service at will. To...