CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

Authentication flaw

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

CVE-2013-4223

The CVE affects the Gentoo Nullmailer package prior to version 1.11-r2. The root cause is world-readable permissions on /etc/nullmailer/remotes, which allows local users to read SMTP authentication credentials stored in that file. This is documented consistently across NVD, OSV, Ubuntu, Debian, a...

PT-2014-2765

Name of the Vulnerable Software and Affected Versions Nullmailer versions prior to 1.11-r2 Description The issue allows local users to obtain SMTP authentication credentials by reading the /etc/nullmailer/remotes file due to world-readable permissions. Recommendations For versions prior to 1.11-r...

CVE-2013-4223: Undefined Security Weakness

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

PT-2014-1315

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 1.4 through 1.41i Cisco NX-OS versions 5.0 through 5.03U22 on Nexus 3000 devices Cisco NX-OS versions 4.1 through 4.12E11l on Nexus 4000 devices Cisco NX-OS versions 5.x through 5.13N11 on Nexus 5000 devices Cisco NX-OS...

Oracle JavaMail SMTP Header Injection

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: JavaMail Vendor: Oracle CSNC ID: CSNC-2014-001 CVD ID: Subject: SMTP Header Injection via method setSubject Risk: Medium Effect: Remotely exploitable Author: Alexandre Herzog Date: 19.05.2014 Introduction:...

SPIP CMS 2.0.23 2.1.223.0.9 - Privilege Escalation

SPIP CMS 2.0.23 2.1.223.0.9 - Privilege Escalation !/usr/bin/env python Exploit Title: SPIP - CMS " exit baseurl = sys.argv1 login =...

SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation

!/usr/bin/env python Exploit Title: SPIP - CMS " exit baseurl = sys.argv1 login = sys.argv2 mail = sys.argv3 cookiejar = cookieli...

SMTP STARTTLS Deployments Better than Expected

As more service providers understand and embrace the importance of encrypting online communication, certain technologies are being elevated to the forefront of conversations. Perfect Forward Secrecy and HTTP Strict Transport Security HSTS are two that generally top most lists, but another, SMTP...

DEBIAN-CVE-2013-0350

tmpsmtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log...

CVE-2013-0350

tmpsmtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log...

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak (2) (DTLS Support)

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak 2 DTLS Support / CVE-2014-0160 heartbleed OpenSSL information leak exploit ========================================================= This exploit uses OpenSSL to create an encrypted connection and trigger the heartbleed leak. The leake...

Mail Server In a Box

Mail-Box : Mass electronic surveillance by governments revealed over the last year has spurred a new movement to re-decentralize the web, that is, to empower netizens to be their own service providers again. SMTP, the protocol of email, is decentralized in principle but highly centralized in...

CVE-2014-0138: Improper Authentication

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses 1 SCP, 2 SFTP, 3 POP3, 4 POP3S, 5 IMAP, 6 IMAPS, 7 SMTP, 8 SMTPS, 9 LDAP, and 10 LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015...