CGIEmail 1.6 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6141/info A vulnerability has been discovered in CGIEmail. It should be noted that this vulnerability exists only if the server allows queries to remote hosts. A remotely exploitable buffer overflow has been discovered in...

Debian Security Advisory DSA 437-1 (cgiemail)

The remote host is missing an update to cgiemail announced via advisory DSA 437-1. OpenVAS Vulnerability Test $Id: deb4371.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 437-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-437)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGIEmail's CGICso (Send CSO via CGI) Command Execution Vulnerability

The remote host seems to be vulnerable to a security problem in CGIEmail cgicso. The vulnerability is caused by inadequate processing of queries by CGIEmail SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a reference...

CGIEmail's Cross Site Scripting Vulnerability (cgicso)

The remote web server contains the SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10780";...

CVE-2002-1652

Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long query parameter...

CVE-2002-1652

CVE-2002-1652 concerns CGIEmail’s CGICso (cgicso.c) in CGIEmail 1.6. The issue is a buffer overflow in cgicso.c triggered by a long query parameter, leading to remote denial of service and the possibility of arbitrary code execution. The OpenVAS entry corroborates a vulnerability in CGIEmail’s cg...

CVE-2002-1652: Undefined Security Weakness

Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long query parameter...

Debian DSA-437-1 : cgiemail - open mail relay

A vulnerability was discovered in cgiemail, a CGI program used to email the contents of an HTML form, whereby it could be used to send email to arbitrary addresses. This type of vulnerability is commonly exploited to send unsolicited commercial email spam. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2002-1575

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline %0a characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message...

[SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 437-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 11th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 437-1] New cgiemail packages fix open mail relaying

-------------------------------------------------------------------------- Debian Security Advisory DSA 437-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 11th, 2004 http://www.debian.org/security/faq -...

CVE-2002-1575

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline %0a characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message...

CVE-2002-1575

The CVE-2002-1575 entry concerns cgiemail, a CGI form-mail utility. The vulnerability enables remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline characters in parameters (e.g., required-subject), allowing modification of CC/BCC/header fields in generated emails...

CVE-2002-1575: Undefined Security Weakness

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline %0a characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message...

DSA-437 cgiemail - open mail relay

Bulletin has no description...

CVE-2002-1652

Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long query parameter...

cgiemail web-based email system does not adequately validate user input thereby causing buffer overflow in cgisco.c

Overview There exists a buffer overflow vulnerability in cgiemail that allows execution of arbitrary code. Description cgiemail is a CGI program maintained that composes data submitted on Web forms into email messages. The cgicso.c component of the web-based email system cgiemail contains a buffe...

CGIEmail 1.6 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/6141/info A vulnerability has been discovered in CGIEmail. It should be noted that this vulnerability exists only if the server allows queries to remote hosts. A remotely exploitable buffer overflow has been discovered in a component included with...

CGIEmail 1.6 - Remote Buffer Overflow

CGIEmail 1.6 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/6141/info A vulnerability has been discovered in CGIEmail. It should be noted that this vulnerability exists only if the server allows queries to remote hosts. A remotely exploitable buffer overflow has been...