Ubuntu: Security Advisory (USN-6876-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6876-1: Kopano Core vulnerabilities

It was discovered that Kopano Core allowed out-of-bounds access. An attacker could use this issue to expose private information. This issue only affected Ubuntu 18.04 LTS. CVE-2019-19907 It was discovered that Kopano Core allowed possible authentication with expired passwords. An attacker could u...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Kopano Core vulnerabilities (USN-6876-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6876-1 advisory. It was discovered that Kopano Core allowed out-of-bounds access. An attacker could use this issue to expose private information...

[SECURITY] [DLA 3354-1] kopanocore security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3354-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 06, 2023 https://wiki.debian.org/LTS -...

Debian dla-3354 : kopano-archiver - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3354 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3354-1 [email protected]...

CVE-2022-26562

An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core = 6.30 introduced between 6.30.0 RC1e and 6.30.8 final...

CVE-2022-26562

An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core = 6.30 introduced between 6.30.0 RC1e and 6.30.8 final...

CVE-2022-26562

CVE-2022-26562 describes an authentication bypass in Kopano Core = 6.30 (provider/libserver/ECPamAuth.cpp), allowing login even when the user password or account is expired. The connected documents confirm the affected components and root cause (expired-password-based auth bypass) but do not prov...

CVE-2022-26562

Removed by vendor...