Mandrake Linux Security Advisory : avahi (MDKSA-2006:215)

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service. Packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2007-0610

Cross-site scripting XSS vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0610

Cross-site scripting XSS vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

Earthlink TotalAccess AtciveX protection bypass

It's possible to manage sender and domain whitelists...

vtforum-13.txt

LiderHack.Org script name : Vt-Forum Lite System V.1.3 Script Download : http://aspindir.com/indir.asp?id=585 Risk : High Found By : St@rExT Thanks : Dekolax , ShaFuck31 , ST@ReXT , Dekolax , SwatHack , Maverick , Candark , Torlaq , Woheras , Siruas Vulnerable file : vfinfo.asp XSS Bug:...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

DEBIAN-CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

USN-380-1: Avahi vulnerability

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service...

Format string

Format string vulnerability in ANSI C Sender Policy Framework library libspf before 1.0.0-p5, when debugging is enabled, allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address...

CVE-2006-1520

Format string vulnerability in ANSI C Sender Policy Framework library libspf before 1.0.0-p5, when debugging is enabled, allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address...

CVE-2006-1520

CVE-2006-1520 affects libspf before 1.0.0-p5. When debugging is enabled, it allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address. Impact: remote code execution. A fix is available in libspf 1.0.0-p5 or later; upgrade to mitigate.

CVE-2006-1948

The CVE-2006-1948 entry affects IBM Lotus Notes 6.0 and 6.5 before 20060331. The issue stems from AddSenderToAddressBook.lss and NameHelper.lss not storing information in the Personal Address Book when multiple messages are selected and a message uses AltFrom, enabling user-assisted remote attack...

The Bat! mail agent headers spoofing

message/partial format alows to spoof message headers completely, making it impossible to track sender by Received or Message-ID headers...

CVE-2004-2642

Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender...

CVE-2004-2642

Yeemp 0.9.9 and earlier errors in encrypting inbound files allow remote attackers to spoof the sender’s identity. Affected: Yeemp inbound file handling (0.9.9 and earlier). Exploitation potential is network-based with low complexity; impact includes partial confidentiality and integrity loss, no ...

FForm Sender 1.0 - Processform.php3?Name Cross-Site Scripting

FForm Sender 1.0 - Processform.php3?Name Cross-Site Scripting source: https://www.securityfocus.com/bid/14324/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in...

Form Sender 1.0 - Processform.php3?Failed Cross-Site Scripting

Form Sender 1.0 - Processform.php3?Failed Cross-Site Scripting source: https://www.securityfocus.com/bid/14326/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in...