Debian: Security Advisory (DSA-1325-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1321-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : evolution-data-server (ZYPP Patch Number 3826)

A malicious IMAP server could execute code within evolution by sending a malformed response to a SEQUENCE command. CVE-2007-3257 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2007-6221

TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Information disclosure

TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6221

The vulnerability CVE-2007-6221 affects TuMusika Evolution 1.7R5. A direct request to phpinfo.php calls phpinfo, enabling remote attackers to disclose configuration information. No remediation details are provided in the connected documents. The exact root cause is exposure of PHP configuration d...

CVE-2007-6221

TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Directory traversal

Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 languagesn.php, 2 languagesf.php, or 3 languages.php in inc/; and 4 allow remote attackers to read arbitrary...

CVE-2007-6188

Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 languagesn.php, 2 languagesf.php, or 3 languages.php in inc/; and 4 allow remote attackers to read arbitrary...

CVE-2007-6188

Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 languagesn.php, 2 languagesf.php, or 3 languages.php in inc/; and 4 allow remote attackers to read arbitrary...

CVE-2007-6188

TuMusika Evolution 1.7R5 is affected by multiple directory traversal flaws enabling remote attackers to include/execute arbitrary local files via ".." in language parameters (languages_n.php, languages_f.php, languages.php in inc/) and to read local files via ".." in the uri parameter to frames/n...

TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================= TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability ============================================================= TuMusika Evolution 1.7R5 Remote File Disclosure...

TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability

No description provided by source. TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/platformdownload.php?groupid=186000 /frames/nogui/scdownload.php ? $file = $GET'uri' ;---xxx $title = $GET'title' ; header'HTTP/1.1 200 OK';...

TuMusika Evolution 1.7R5 - Remote File Disclosure

TuMusika Evolution 1.7R5 - Remote File Disclosure TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/platformdownload.php?groupid=186000 /frames/nogui/scdownload.php Exploit:...

TuMusika Evolution 1.7R5 - Remote File Disclosure

TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/platformdownload.php?groupid=186000 /frames/nogui/scdownload.php Exploit: /Evolution1.7/frames/nogui/scdownload.php?uri=../../../../../../etc/passwd TuMusika Evolution 1.7R5 Local File Inclusion...

Ubuntu 6.06 LTS / 6.10 : evolution vulnerability (USN-442-1)

Ulf Harnhammar of Secunia Research discovered that Evolution did not correctly handle format strings when displaying shared memos. If a remote attacker tricked a user into viewing a specially crafted shared memo, they could execute arbitrary code with user privileges. Note that Tenable Network...

Ubuntu 6.06 LTS / 6.10 / 7.04 : evolution-data-server vulnerability (USN-475-1)

Philip Van Hoof discovered that the IMAP client in Evolution did not correctly verify the SEQUENCE value. A malicious or spoofed server could exploit this to execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding description block directly from...

GLSA-200711-04 : Evolution: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200711-04 Evolution: User-assisted remote execution of arbitrary code The imaprescan function of the file camel-imap-folder.c does not properly sanitize the 'SEQUENCE' response sent by an IMAP server before being used to index...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...