368 matches found
CVE-2008-1648: Improper Input Validation
Sympa before 5.4 allows remote attackers to cause a denial of service daemon crash via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information...
Sympa < 5.4 Content-Type Header Remote DoS
Binary data 4454.prm...
Sympa Application Detection
Binary data 4455.prm...
Sympa Malformed Content-Type Header Remote DoS
According to its banner, the version of Sympa installed on the remote host contains a flaw that causes sympa.pl to crash when sending a text digest if it encounters a message with a malformed Content-Type header. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...
Sympa Detection
The remote host is running Sympa, an open source mailing list software application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31725; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Sympa Detection...
Debian Security Advisory DSA 677-1 (sympa)
The remote host is missing an update to sympa announced via advisory DSA 677-1. OpenVAS Vulnerability Test $Id: deb6771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 677-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-677-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sympa < 4.1.3 Privilege Escalation Vulnerability
The remote version of Sympa contains a vulnerability which can be exploited by malicious local user to gain escalated privileges. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Sympa < 3.4.4.1 DoS Vulnerability
Sympa contains a flaw in the processing of LDAP passwords. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sympa:sympa";...
Sympa < 4.1.2 DoS Vulnerability
This version of Sympa has a flaw in one of it SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sympa:sympa"; ifdescription...
Sympa < 4.1.2 Authentication Vulnerability
The version of Sympa has an authentication flaw within the web interface. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
FreeBSD : sympa (1653)
The following package needs to be updated: sympa %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScrip...
FreeBSD : sympa -- buffer overflow in 'queue' (0d9ba03b-0dbb-42b4-ae0f-60e27af78e22)
Erik Sjolund discovered a vulnerability in Sympa. The queue application processes messages received via aliases. It contains a buffer overflow in the usage of sprintf. In some configurations, it may allow an attacker to execute arbitrary code as the sympa user. %NASLMINLEVEL 70300 C Tenable Netwo...
CVE-2005-0073
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code...
CVE-2005-0073
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code...
CVE-2005-0073
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code...
DEBIAN-CVE-2005-0073
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code...
CVE-2004-1735
The CVE-2004-1735 entry describes a Cross-site Scripting (XSS) vulnerability in Sympa, affecting version 4.1.x and earlier, where remote authenticated users can inject arbitrary script/HTML through the description field when using the create list option. The issue is categorized as an HTML inject...
