CVE-2005-3895

Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary w...

[SA17511] Mailman Attachment Filename Scrubbing Denial of Service

TITLE: Mailman Attachment Filename Scrubbing Denial of Service SECUNIA ADVISORY ID: SA17511 VERIFY ADVISORY: http://secunia.com/advisories/17511/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Mailman 2.x http://secunia.com/product/1010/ DESCRIPTION: Aliet Santiesteban...

[SA17411] YaBB Attachment Script Insertion Vulnerability

TITLE: YaBB Attachment Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17411 VERIFY ADVISORY: http://secunia.com/advisories/17411/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: YaBB 2.x http://secunia.com/product/6070/ DESCRIPTION: A...

DSA-887-1 clamav - several

Bulletin has no description...

osTicket Attachment Viewing Vulnerability

The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. OpenVAS Vulnerability Test $Id: osticketviewattachments.nasl 6056 2017-05-02 09:02:50Z teissa $...

IlohaMail Attachment Upload Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions do not properly check the upload path for file attachments, which may allow an attacker to place a file on the target in a location writable by the web user if the file-based backend is in use. Fo...

BasiliX Attachment Disclosure Vulnerability

The remote web server contains a series of PHP scripts that are prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions save attachments by default under SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptio...

osTicket < 1.2.7 Large Attachment Vulnerability - Active Check

The target is running at least one instance of osTicket that enables a remote user to an open new ticket with an attachment of unlimited size. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

BugPort unspecified attachment handling flaw

This version of BugPort contains an unspecified attachment handling flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BasiliX Attachment Disclosure Vulnerability

The remote web server contains a series of PHP scripts that are prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions save attachments by default under '/tmp/BasiliX', which is world-readable and apparently never empti...

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

IlohaMail < 0.7.9 Attachment Upload Vulnerability

IlohaMail does not properly check the upload path for file attachments, which may allow an attacker to place a file on the target in a location writable by the web user if the file-based backend is in use. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted fro...

osTicket < 1.2.7 Attachment Code Execution Vulnerability - Active Check

The target is running at least one instance of osTicket that enables a remote user to open a new ticket with an attachment containing arbitrary PHP code and then to run that code using the permissions of the web server user. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions mig...

[Full-disclosure] Multiple vulnerabilities within RockLiffe MailSite Express WebMail

======================================================================== = Multiple vulnerabilities within RockLiffe MailSite Express WebMail = = Also available online at = http://www.security-assessment.com/Advisories/RockliffeExpressWebmailVuln erabilities.pdf = = Vendor Website: =...

Mozilla Thunderbird < 1.5 Multiple Vulnerabilities (deprecated)

Binary data 3258.prm...

CVE-2005-3140

Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map passwd.nis as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes...

CVE-2005-3140

Vulnerability overview (CVE-2005-3140): Procom NetFORCE 800, v4.02 M10 Build 20 and possibly other versions, can expose cleartext NIS password hashes because the NIS password map (passwd.nis) is sent as a file attachment in diagnostic e‑mail messages. The underlying issue is the unintended exfilt...

Debian DSA-824-1 : clamav - infinite loop, buffer overflow

Two vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified : - CAN-2005-2919 A potentially infinite loop could lead to a denial of service. -...

DSA-824-1 clamav - infinite loop, buffer overflow

Bulletin has no description...

MolyX vulnerability analysis-vulnerability warning-the black bar safety net

Text/SuperHei·Safety AngelS4T 2005.09.21 Nonsense: MolyX Board（hereinafter referred to MXB is MolyX Studios group as if that is CNVBB team development of PHP Forum program, MXB fusion of many forums, absorbing, powerful. The multi-year Forum program finished and improved experience also makes the...