6690 matches found
CVE-1999-1051
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the replymessageattach attachment parameter...
Matt Wright - FormHandler.cgi 2.0 Reply Attachment
Matt Wright - FormHandler.cgi 2.0 Reply Attachment source: https://www.securityfocus.com/bid/799/info Any file that the FormHandler.cgi has read access to the cgi is typically run as user 'nobody' on Unix systems can be specified as an attachment in a reply email. This could allow an attacker to...
Matt Wright - 'FormHandler.cgi' 2.0 Reply Attachment
source: https://www.securityfocus.com/bid/799/info Any file that the FormHandler.cgi has read access to the cgi is typically run as user 'nobody' on Unix systems can be specified as an attachment in a reply email. This could allow an attacker to gain access to sensitive files such as /etc/passwd...
CVE-1999-1050
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via 1 a .. dot dot in the replymessageattach attachment parameter, or 2 by specifying the filename as a template...
BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow
BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 25...
eudora.attachment.bof.txt
Date: Sat, 20 Mar 1999 02:21:35 -0500 From: whiz To: [email protected] Subject: Eudora Attachment Buffer Overflow I have found another problem with Eudora, attachments, and long filenames that is similar to the the problem I found last year. If two messages are sent to an Eudora 4.1 user that...
ie0199.exe-trojan.txt
Date: Thu, 28 Jan 1999 20:12:39 -0500 From: Mark E. Duck To: [email protected] Subject: E-mailed Trojan There is a trojan horse circulating the Internet as an attachment in email with a spoofed email address of Microsoft Corporation. It contains an announcement and an attachment that is...
Security update 1970-01-01
...
Security Update For Exchange Server 2016 CU8 (KB4092041)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...