7483 matches found
Phpbb id: 10701 update and Attachmodule add-on Directory Traversal
Phpbb: All vulnerable all except 2.0.11 Attachment module: All version vulnerable Howdark update opened wide my eyes with his nice exploit: Bugtraq id: 10701 ----- viewtopic.php?t=1&highlight=2527 ----- Looking at the code I saw that was possible inject any type of Sql query with a multiple char...
eudora62014.txt
Eudora 6.2 ==6.2.0.14 for Windows was released on 8 Nov 04. The release notes http://www.eudora.com/download/eudora/windows/6.2/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Some cases remai...
Eudora 6.2 attachment spoof
Eudora 6.2 ==6.2.0.14 for Windows was released on 8 Nov 04. The release notes http://www.eudora.com/download/eudora/windows/6.2/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Some cases remai...
Attachment spoofing code execution in Eudora
If "attach" and "attach.exe" co-exist in message and "attach" is clicked, "attach.exe" will be silently executed instead...
GLSA-200411-06 : MIME-tools: Virus detection evasion
The remote host is affected by the vulnerability described in GLSA-200411-06 MIME-tools: Virus detection evasion MIME-tools doesn't correctly parse attachment boundaries with an empty name boundary=''. Impact : An attacker could send a carefully crafted email and evade detection on some email...
Eudora 6.2.0.7 Attachment Spoofer Exploit
Exploit for unknown platform in category remote exploits ========================================= Eudora 6.2.0.7 Attachment Spoofer Exploit ========================================= !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windo...
Eudora 6.2.0.7 - Attachment Spoofer
Eudora 6.2.0.7 - Attachment Spoofer !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script...
Eudora 6.2.0.7 attachment spoof
Eudora 6.2.0.7 for Windows is in beta testing since 8 Oct 2004. The release notes http://www.eudora.com/download/eudora/windows/6.2/Betas/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Not so...
Eudora 6.2.0.7 - Attachment Spoofer
!/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script into: sendmail -i victim\n\n"; print...
Eudora 6.2.0.7 Attachment Spoofer Exploit
No description provided by source. !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script...
[SA12730] BugPort Unspecified Attachment Handling Vulnerability
TITLE: BugPort Unspecified Attachment Handling Vulnerability SECUNIA ADVISORY ID: SA12730 VERIFY ADVISORY: http://secunia.com/advisories/12730/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: BugPort 1.x http://secunia.com/product/2957/ DESCRIPTION: Eduardo Correia has...
Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)
/ GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by making it have reverse connectback as...
mozilla -- vCard stack buffer overflow
Georgi Guninski discovered a stack buffer overflow which may be triggered when viewing email messages with vCard attachments...
HastyMail HTML Attachment Content-Disposition Header XSS
Binary data 2167.prm...
HastyMail HTML Attachment Script Execution
The remote host is running HastyMail, a PHP-based mail client application. The installed version contains a flaw caused by email attachments not being properly defined int he Content-Disposition HTTP header. An attacker could exploit this flaw to inject Javascript or ActiveX code in an attachment...
SMTP Server Inbound .exe Attachment Detection
Binary data 1173.prm...
Qualcomm Eudora Attachment Filename Handling Overflow (deprecated)
Binary data 1324.prm...
Microsoft Outlook Express for MacOS HTML Attachment Automatic Download Vulnerability
Binary data 1293.prm...