CVE-2010-0215: Undefined Security Weakness

ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and 1 delete an attachment or 2 subscribe to an object, via a crafted URL...

[SECURITY] Fedora 13 Update: clamav-0.96.5-1300.fc13

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2010-2602

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF document...

CVE-2010-2602

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF document...

Cross site request forgery (csrf)

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

CVE-2010-4546

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

CVE-2010-4546

CVE-2010-4546 affects IBM Lotus Notes Traveler prior to 8.5.1.2. The issue arises when handling an attachment download request for an e-mail message with a Prevent Copy attribute, where the system does not reject the request. This allows remote authenticated users to bypass intended access restri...

PT-2010-5528

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.2 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by not rejecting an attachment download request for an e-mail message with a...

CVE-2010-4546: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

[SECURITY] Fedora 14 Update: clamav-0.96.5-1400.fc14

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Basic auth authentication does not allow files to be attached in 4.2

From the customer support case quote When using osauthType=basic to login to JIRA 4.2 a user is able to upload an attachment as a temporary file, but is unable to attach the temporary file to the issue. We noticed the exact same behavior ... had worked with JIRA 4.1.2. quote The Atlassian support...

Fedora Update for clamav FEDORA-2010-15443

Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2010-15443 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Be Alert : "Postcard" computer virus is Out ~~ !!

WARNINGS have been issued this weekend about a highly destructive computer virus which has been released under the guise of a postcard greeting. It is strongly advised that computer users should not open any message with an attachment entitled "Postcard" or "Postcard from Hallmark", regardless of...

BlackBerry Enterprise Server / Attachment Service PDF Distiller Buffer Overflow (KB24547)

The version of BlackBerry Enterprise Server on the remote host is reportedly affected by a buffer overflow vulnerability in the PDF distiller component of the BlackBerry Attachment Service. By sending a specially crafted PDF file and having it opened on a BlackBerry smartphone, an attacker may be...

PT-2010-4135

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 4.1.7 and earlier BlackBerry Enterprise Server versions 5.0.0 through 5.0.2 BlackBerry Professional Software versions 4.1.4 and earlier Description The issue is related to multiple buffer overflows in the...

CVE-2010-2601: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a...

Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook - 'ATTACH_BY_REF_RESOLVE' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)

This host is missing a critical security update according to Microsoft Bulletin MS10-064. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Potential attack vector using attachments

Suspicious handling of attachment uploads with filenames containing quotes the quoted ended up being repeated and semicolons semicolon and all subsequent characters were stripped from filename...