43 matches found
EUVD-1999-0065
Malware in sbrugna...
EUVD-2006-5437
Malware in sbrugna...
EUVD-2001-0540
Malware in sbrugna...
EUVD-1999-0821
Malware in sbrugna...
CVE-1999-0065
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands...
Solaris 2.6/7.0 DTMail Mail Environment Variable Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3081/info dtmail is an application included with the Common Desktop Environment, one of the X Window Managers included with Solaris. A buffer overflow in dtmail makes it possible for a local user to gain elevated...
Solaris 7.0 CDE dtmail/mailtool Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type: field, which wou...
Solaris Update for dtmail 109614-07
Check for the Version of dtmail OpenVAS Vulnerability Test Solaris Update for dtmail 109614-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
Solaris Update for dtmail 113870-05
Check for the Version of dtmail OpenVAS Vulnerability Test Solaris Update for dtmail 113870-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
Solaris Update for dtmail 109614-07
Check for the Version of dtmail OpenVAS Vulnerability Test Solaris Update for dtmail 109614-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
Solaris Update for dtmail 113870-05
Check for the Version of dtmail OpenVAS Vulnerability Test Solaris Update for dtmail 113870-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
Solaris 2.4 (sparc) : 104178-04
CDE 1.0.2: dtmail fixes. Date this patch was last updated by Sun : Dec/27/99 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 4 (x86) : 104185-04
CDE 1.0.2x86: dtmail fixes. Date this patch was last updated by Sun : Dec/27/99 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
HP-UX PHSS_35434 : HP-UX Running dtmail, Local Execution of Arbitrary Code (HPSBUX02162 SSRT061223 rev.1)
s700800 11.11 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running dtmail. The vulnerability could be exploited by a local, authorized user to execute arbitrary code as a member of the 'mail' group. References: NETRAGARD-20060810. %NASLMINLEVEL 70300 ...
HP DTMail附件参数缓冲区溢出漏洞
HP DTMail是在桌面上使用的邮件客户端。 DTMail在处理-a选项参数时存在缓冲区溢出漏洞,本地攻击者可以利用此漏洞获得root用户权限。 以下gdb输出显示了这个漏洞: gdb r -a -a perl -e 'print "A" x 9000' Starting program: /cluster/members/member0/tmp/dtmail -a perl -e 'print "A"x 9000' no debugging symbols found...no debugging symbols found... no debugging symbols...
HP-UX PHSS_35435 : HP-UX Running dtmail, Local Execution of Arbitrary Code (HPSBUX02162 SSRT061223 rev.1)
s700800 11.23 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running dtmail. The vulnerability could be exploited by a local, authorized user to execute arbitrary code as a member of the 'mail' group. References: NETRAGARD-20060810. %NASLMINLEVEL 70300 ...
CVE-2006-5452
Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a aka attachment argument...
CVE-2006-5452
CVE-2006-5452 affects dtmail on HP Tru64 UNIX 4.0F–5.1B and HP-UX B.11.00–B.11.23, where a buffer overflow allows local users to execute arbitrary code via a long -a attachment argument. The issue is triggered within dtmail’s handling of attachments, enabling local code execution with the user’s ...
CVE-2006-5452
Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a aka attachment argument...
HP Tru64 dtmail buffer overflow
Buffer overflow on -a flag parsing...