Unfixed XSS vulnerability at arc.lib.montana.edu

Security researcher bonaff, has submitted on 03/10/2010 a cross-site-scripting XSS vulnerability affecting arc.lib.montana.edu, which at the time of submission ranked 46926 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

GLSA-201001-08 : SquirrelMail: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201001-08 SquirrelMail: Multiple vulnerabilities Multiple vulnerabilities were found in SquirrelMail: Niels Teusink reported multiple input sanitation flaws in certain encrypted strings in e-mail headers, related to...

Unfixed XSS vulnerability at www.notaires-conseil.com

Security researcher Baybora, has submitted on 23/02/2010 a cross-site-scripting XSS vulnerability affecting www.notaires-conseil.com, which at the time of submission ranked 27314463 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 10...

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 10...

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 11...

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 11...

[SECURITY] Fedora 11 Update: roundcubemail-0.3.1-2.fc11

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

CVE-2010-0464

CVE-2010-0464 affects Roundcube 0.3.1 and earlier, where the browser is not instructed to avoid DNS prefetching for domain names in email messages, enabling remote attackers to infer the user’s network location by DNS requests. Public references include Fedora backport and Debian backports adviso...

CVE-2004-2766

Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486...

Security Best Practice: Protect Yourself from Multiple IMAP Vulnerabilities

The Internet Message Access Protocol IMAP is one of the two most prevalent Internet standard protocols for e-mail retrieval, the other being the Post Office Protocol POP.Virtually all modern e-mail clients and mail servers support both protocols as a means of transferring e-mail messages from a...

Unfixed XSS vulnerability at www.sikorsky.com

Security researcher watt, has submitted on 01/10/2010 a cross-site-scripting XSS vulnerability affecting www.sikorsky.com, which at the time of submission ranked 321898 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

Unfixed XSS vulnerability at www.icomplaints.in

Security researcher Th3 RDX, has submitted on 01/07/2010 a cross-site-scripting XSS vulnerability affecting www.icomplaints.in, which at the time of submission ranked 204926 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Design/Logic Flaw

The shutdown function in the ZendLogWriterMail class in Zend Framework ZF allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."...

Cross site scripting

TextFilter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not properly handle data: URIs, which allows remote attackers to conduct cross-site scripting XSS attacks via data:text/html...

CVE-2009-4363

CVE-2009-4363 affects Horde Framework components (Text_Filter/lib/Horde/Text/Filter/Xss.php) and related Horde Groupware packages, where data: URIs in HTML email HREF attributes could trigger cross-site scripting. Root cause is improper handling of data: URIs; vendor notes issue tied to Firefox. ...