Updated ruby packages fix security vulnerabilities

It was discovered that Ruby Net::SMTP incorrectly handled CRLF sequences. A remote attacker could possibly use this issue to inject SMTP commands. CVE-2015-9096 Marcin Noga discovered that Ruby incorrectly handled certain arguments in a TclTkIp class method. An attacker could possibly use this...

CVE-2017-10208

Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successfu...

CVE-2017-10208

CVE-2017-10208 affects the Oracle Hospitality e7 component of Oracle Hospitality Applications, version 4.2.1. The vulnerability allows a low-privilege attacker with network access via SMTP to obtain unauthorized read access to a subset of e7 data. The documents do not specify a patch version or r...

Apache Commons Email Input Validation Vulnerability

Apache Commons Email is the United States Apache Apache Software Foundation, an application programming interface that provides e-mail sending capabilities. A security vulnerability exists in Apache Commons Email versions 1.0 through 1.4. An attacker can exploit the vulnerability to add arbitrary...

PT-2017-11200

Name of the Vulnerable Software and Affected Versions Oracle Hospitality e7 version 4.2.1 Description The issue allows a low-privileged attacker with network access via SMTP to compromise Oracle Hospitality e7, resulting in unauthorized read access to a subset of Oracle Hospitality e7 accessible...

CVE-2017-10208: Undefined Security Weakness

Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successfu...

Sql injection

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

CVE-2017-9801

CVE-2017-9801 affects Apache Commons Email (versions 1.0–1.4). A call-site passing an email subject containing line-breaks can be exploited to inject arbitrary SMTP headers, due to a flaw in how setSubject handles input. This can lead to SMTP header manipulation and potential information exposure...

CVE-2017-9801

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

CVE-2017-9801

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

CVE-2017-9801

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

CVE-2017-9801: Improper Input Validation

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

PT-2017-19194

Name of the Vulnerable Software and Affected Versions Apache Commons Email versions 1.0 through 1.4 Description The issue allows a caller to add arbitrary SMTP headers when a subject for an email contains line-breaks. Recommendations For Apache Commons Email versions 1.0 through 1.4, consider...

[SECURITY] Fedora 26 Update: php-PHPMailer-5.2.24-1.fc26

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

SMTP Header Injection

Apache Commons Email is vulnerable to SMTP Header Injections. A malicious user can inject arbitrary SMTP Headers by passing line-breaks as a subject of an email...

HPSBPI03563 rev 1 - SMTP Credentials Vulnerability for HP Designjet and HP Latex printers

Potential Security Impact Potential exposure of SMTP credentials when configuring HP Designjet and HP Latex printers. Reported by: Nicodemo Gawronski VULNERABILITY SUMMARY HP has identified a potential security vulnerability with some HP Designjet and HP Latex printers that may expose the...

[SECURITY] Fedora 25 Update: php-PHPMailer-5.2.24-1.fc25

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

XSS vulnerability in code example

SECURITY Fix XSS vulnerability in one of the code examples, CVE-2017-11503. The codegenerator.phps example did not filter user input prior to output. This file is distributed with a .phps extension, so it it not normally executable unless it is explicitly renamed, so it is safe by default. There...

Multiple CRLF Injection

PHPMailer is vulnerable to multiple CRLF injection attacks. The attacks exist because it does not filter address inputs with line breaks. A malicious user can pass an email address to the validateAddress function in class.phpmailer.php or pass SMTP commands to the sendCommand function in...

Ubuntu 14.04 LTS / 16.04 LTS : Ruby vulnerabilities (USN-3365-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3365-1 advisory. It was discovered that Ruby DL::dlopen incorrectly handled opening libraries. An attacker could possibly use this issue to open libraries wit...