228 matches found
CVE-2005-0183
The CVE-2005-0183 issue affects the Vacation plugin (version 0.15 and earlier) used with Squirrelmail. Local users can execute arbitrary commands by injecting shell metacharacters into a command-line argument, due to improper handling in ftpfile within the plugin. This leads to potential compromi...
CVE-2005-0184
CVE-2005-0184 describes a directory traversal vulnerability in the ftpfile component of the Vacation plugin (0.15 and earlier) for Squirrelmail. The issue allows local users to read arbitrary files via a .. path in a get request. Affected product: Squirrelmail Vacation plugin (version 0.15 and ea...
Squirrelmail vacation plugin shell characters problem
Unfiltered shell characters on ftpfile external program invocation...
Squirrelmail vacation v0.15 local root exploit
LSS Security Advisory LSS-2005-01-03 http://security.lss.hr --- Title : Squirrelmail vacation v0.15 local root exploit Advisory ID : LSS-2005-01-03 Date : 10.01.2005. Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 Impact : Privilege escalation and arbitrary fil...
LSS-2005-01-03.txt
LSS Security Advisory LSS-2005-01-03 http://security.lss.hr --- Title : Squirrelmail vacation v0.15 local root exploit Advisory ID : LSS-2005-01-03 Date : 10.01.2005. Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 Impact : Privilege escalation and arbitrary fil...
CVE-1999-0057
Vacation program allows command execution by remote users through a sendmail command...
CVE-1999-0057
The CVE refers to the HP-UX vacation program allowing remote command execution by sending crafted input that causes the Vacation utility to pass arbitrary parameters to sendmail. The issue is associated with HP patch PHNE_16295 for s700/s800 11.00 (HP-UX Vacation patch), indicating the remediatio...
