1640 matches found
LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...
Gentoo Security Advisory GLSA 200606-19 (sendmail)
The remote host is missing updates announced in advisory GLSA 200606-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200603-21 (sendmail)
The remote host is missing updates announced in advisory GLSA 200603-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200512-05 (xmail)
The remote host is missing updates announced in advisory GLSA 200512-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200603-21 (sendmail)
The remote host is missing updates announced in advisory GLSA 200603-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200606-19 (sendmail)
The remote host is missing updates announced in advisory GLSA 200606-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
sSMTP 'from_format()'未初始化内存信息泄漏漏洞
BUGTRAQ ID: 31094 CVE ID：CVE-2008-3962 CNCVE ID：CNCVE-20083962 Anibal Monsalve Salazar sSMTP是一款sendmail的可替代程序。 sSMTP 'fromformat'存在设计问题，远程攻击者可以利用漏洞获得敏感信息。 'fromformat'利用未初始化内存，可导致敏感信息泄漏。 Gentoo Linux Anibal Monsalve Salazar sSMTP 2.62 可参考如下补丁： https://bugs.gentoo.org/attachment.cgi?id=165005...
FreeBSD Security Advisory (FreeBSD-SA-06:17.sendmail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:17.sendmail.asc ADV FreeBSD-SA-06:17.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...
FreeBSD Security Advisory (FreeBSD-SA-03:13.sendmail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:13.sendmail.asc ADV FreeBSD-SA-03:13.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...
FreeBSD Security Advisory (FreeBSD-SA-06:13.sendmail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:13.sendmail.asc ADV FreeBSD-SA-06:13.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...
FreeBSD Ports: sendmail
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Security Advisory (FreeBSD-SA-03:13.sendmail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:13.sendmail.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Security Advisory (FreeBSD-SA-06:13.sendmail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:13.sendmail.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Security Advisory (FreeBSD-SA-06:17.sendmail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:17.sendmail.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Ports: sendmail
The remote host is missing an update to the system as announced in the referenced advisory. VID 08ac7b8b-bb30-11da-b2fb-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Postfix <= 2.6-20080814 (symlink) Local Privilege Escalation Exploit
No description provided by source. !/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt [email protected] Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf...
Postfix 2.6-20080814 - symlink Local Privilege Escalation
Postfix 2.6-20080814 - symlink Local Privilege Escalation !/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf...
Eudora 6.0.3 Attachment Spoofing Exploit (windows)
No description provided by source. !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.0.3 on Windows spoof, LaunchProtect\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "\n"; print "This is a...
Common left the back door approach-vulnerability warning-the black bar safety net
For us such a dish hand, finally got the servers is not easy, if it is found it miserable. In fact, the open back door methods there are many, below I to talk, I've learned of several ways. 1. Setuid cp /bin/sh /tmp/. root chmod u-s /tmp/. root Add suid bit to the shell on, although very simple,...
ClamAV Milter Blackhole-Mode Remote Code Execution
This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...