DeluxeBB 1.06 - Attachment mod_mime Remote Command Execution

DeluxeBB 1.06 - Attachment modmime Remote Command Execution !/usr/bin/php -q -d shortopentag=on ? echo "DeluxeBB = v1.06 attachment modmime exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "tested & working against a fresh deluxebb...

DeluxeBB 1.06 - 'Attachment mod_mime' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on ? echo "DeluxeBB = v1.06 attachment modmime exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "tested & working against a fresh deluxebb installation\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host...

Integer overflow

Integer overflow in Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted MacMIME encapsulated attachment...

CVE-2006-2203

Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter."...

Design/Logic Flaw

Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter."...

CVE-2006-2203

CVE-2006-2203 affects Kerio MailServer prior to 6.1.4. The vulnerability is described as an unspecified issue with unknown impact and remote attack vectors related to a possible bypass of the attachment filter. No concrete root cause, impact details, exploit information, or official remediation/f...

CVE-2006-2203

Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter."...

[SA19875] Kerio MailServer Attachment Filter Bypass Vulnerability

TITLE: Kerio MailServer Attachment Filter Bypass Vulnerability SECUNIA ADVISORY ID: SA19875 VERIFY ADVISORY: http://secunia.com/advisories/19875/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Kerio MailServer 6.x http://secunia.com/product/3782/ DESCRIPTION: A...

CVE-2006-2087

The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...

Design/Logic Flaw

Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...

CVE-2006-2055

Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as a...

PT-2006-3039 · Microsoft +1 · Outlook +1

Name of the Vulnerable Software and Affected Versions: Avant Browser version 10.1 Build 17 Description: The issue allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler. This can be demonstrated by...

Multiple browsers Windows mailto protocol Office 2003 file attachment exploit

Inge Henriksen Security Advisory http://ingehenriksen.blogspot.com/ Advisory Name: Multiple browsers Windows mailto protocol Office 2003 file attachment exploit Release Date: Not released Tested and Confirmed Vulerable: Micrsoft Outlook 2003 SP 1 Microsoft Internet Explorer 6 SP2 Mozilla Firefox...

PT-2006-3038 · Microsoft +1 · Outlook +1

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox version 1.0.6 Description: The issue allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler. This could potentially be used to...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBB MyBulletinBoard 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment...

CVE-2006-1911

Cross-site scripting XSS vulnerability in MyBB MyBulletinBoard 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment...

CVE-2006-1911

Cross-site scripting XSS vulnerability in MyBB MyBulletinBoard 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment...

CVE-2006-0052

The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...

Design/Logic Flaw

The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...

CVE-2006-0052

The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...