Sympa 4.x - New List HTML Injection

Sympa 4.x - New List HTML Injection source: https://www.securityfocus.com/bid/10992/info An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data. Unsuspecting users viewing the affected page will ha...

Sympa 4.x - New List HTML Injection

source: https://www.securityfocus.com/bid/10992/info An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data. Unsuspecting users viewing the affected page will have attacker-supplied malicious code...

Sympa < 4.1.2 List Creation Authentication Bypass

Binary data 1733.prm...

Sympa < 4.1.2 wwsympa.fcgi List Master Authentication Bypass

Binary data 2118.prm...

Sympa < 4.1.3 List Creation Description Field XSS

Binary data 2119.prm...

Sympa wwsympa.fcgi Unauthorised List Creation

According to its version number, the installation of Sympa on the remote host has an authentication flaw within the web interface. An attacker, exploiting this flaw, would be able to bypass security mechanisms and perform listmaster functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Sympa wwsympa do_search_list Overflow DoS

According to its version number, the installation of Sympa on the remote host has a flaw in one of it's scripts wwsympa.pl that would allow a remote attacker to overflow the SYMPA server. Specifically, within the cgi script wwsympa.pl is a 'dosearchlist' function that fails to perform bounds...

Sympa wwsympa Invalid LDAP Password Remote DoS

According to its version number, the installation of Sympa on the remote host contains a flaw in the processing of LDAP passwords. A successful attack would crash the sympa application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...