112 matches found
[SECURITY] [DSA 3462-1] radicale security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3462-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 30, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3462-1 (radicale - security update)
Two vulnerabilities were fixed in radicale, a CardDAV/CalDAV server. CVE-2015-8747 The not configured by default and not available on Wheezy multifilesystem storage backend allows read and write access to arbitrary files still subject to the DAC permissions of the user the radicale server is...
DSA-3462-1 radicale - security update
Bulletin has no description...
PT-2016-3996
Name of the Vulnerable Software and Affected Versions Radicale versions prior to 1.1 Description The issue allows remote authenticated users to bypass owner write and owner only limitations via regex metacharacters in the user name. This can be demonstrated by using "." in the user name,...
PT-2016-3995
Name of the Vulnerable Software and Affected Versions Radicale versions prior to 1.1 Description The issue allows remote attackers to read or write to arbitrary files via a crafted component name in the multifilesystem storage backend. Recommendations For versions prior to 1.1, update to version...
Debian: Security Advisory (DSA-3462-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-403-1 : radicale security update
Several issues have been discovered by Unrud in Radicale, a calendar and addressbook server. A remote attacker could exploit these vulnerabilities and call arbitrary functions by sending crafted HTTP requests. CVE-2015-8748 Prevent regex injection in rights management. Prevent crafted HTTP reques...
DLA-403-1 radicale - security update
Bulletin has no description...
[SECURITY] Fedora 22 Update: radicale-1.1.1-1.fc22
The Radicale Project is a CalDAV calendar and CardDAV contact server. It aims to be a light solution, easy to use, easy to install, easy to configur e. As a consequence, it requires few software dependencies and is pre-configur ed to work out-of-the-box. The Radicale Project runs on most of the...
Kozea Radicale Security Bypass Vulnerability
Kozea Radicale is a free and open source CalDAV and CardDAV server solution. A security vulnerability exists in Kozea Radicale that could be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...
Kozea Radicale Arbitrary File Access Vulnerability
Kozea Radicale is a free and open source CalDAV and CardDAV server solution. Kozea Radicale fails to adequately filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting special requests to access arbitrary files...
