Fedora 13 : maniadrive-1.2-23.fc13 / php-5.3.4-1.fc13.1 / php-eaccelerator-0.9.6.1-3.fc13 (2010-19011)

Security Enhancements and Fixes in PHP 5.3.4 : - Fixed crash in zip extract method possible CWE-170. - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed a possible double free in imap extension Identified by Mateusz Kocielski. CVE-2010-4150. - Fixed NULL...

Update Protection against Novell GroupWise Internet Agent Content-Type Buffer Overflow

A buffer overflow vulnerability was reported in Novell GroupWise Internet Agent GWIA, a component of Novell GroupWise. GWIA provides email services and support in SMTP, POP, and IMAP protocols. The vulnerability is due to improper validation of data received within the "Content-Type" header of...

Microsoft Releases Blog Entry Regarding Recent Outlook 2007 Update

The Microsoft Outlook product team has posted a blog entry to inform users of several issues related to the Outlook 2007 update KB2412171 that was released on December 14. The product team has identified these issues as: Outlook fails to connect if Secure Password Authentication SPA is configured...

PHP 5.2.x < 5.2.15 Multiple Vulnerabilities

Binary data 5733.prm...

php-imap -- Denial of Service

The following DoS condition in IMAP extension was fixed in PHP 5.3.4 and PHP 5.2.15: A remote user can send specially crafted IMAP user name or password data to trigger a double free memory error in 'ext/imap/phpimap.c' and cause the target service to crash. It may be possible to execute arbitrar...

PHP 5.2.x < 5.2.15 Multiple Vulnerabilities

Binary data 801097.prm...

CVE-2010-4150

Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

UBUNTU-CVE-2010-4150

Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

CVE-2010-4150

Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

CVE-2010-4150

Double free vulnerability in the imapdoopen function in the IMAP extension ext/imap/phpimap.c in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

Preemptive Protection against Novell GroupWise Internet Agent RRULE Parsing Buffer Overflow

A remote code execution vulnerability exists in Novell GroupWise Internet Agent GWIA. Novell GroupWise Internet Agent is a component of Novell GroupWise and provides email services, supporting SMTP, POP, and IMAP protocols. The vulnerability is due to a buffer overflow when parsing a RRULE variab...

[ MDVSA-2010:239 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:239 http://www.mandriva.com/security/ Package : php Date : November 19, 2010 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A possible double free flaw was found ...

PHP “/imap/php_imap.c”释放后重利用远程代码执行漏洞

BUGTRAQ ID: 44980 CVE ID: CVE-2010-4510 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP处理IMAP协议数据的实现上存在漏洞，远程攻击者可能利用此漏洞导致拒绝服务或执行任意指令。 当用户提供特定的用户名和口令数据时会触发释放重利用问题。 MandrakeSoft Corporate Server 4.0 x8664 MandrakeSoft Corporate Server 4.0 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 10.1...

GroupWise Internet Agent < 8.0.2 HP1 Multiple Flaws

The version of GroupWise Internet Agent installed on the remote host is older than 8.0.2.11941 and hence affected by the following issues : - Multiple 'Content-Type' header parsing issues can result in arbitrary code execution on the remote system. ZDI-10-237 / ZDI-10-238 / ZDI-10-241 - Multiple...

Mandriva Linux Security Advisory : php (MDVSA-2010:239)

A possible double free flaw was found in the imap extension for php CVE-2010-4150. A GC corrupting flaw was found in Zend/zendgc.c for php-5.3.x that under certain circumstances could cause a segmention fault crash. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please...

Preemptive Protection against Novell GroupWise Internet Agent IMAP Service Stack Buffer Overflow

A buffer overflow vulnerability exists in Novell GroupWise Internet Agent. Novell GroupWise Internet Agent is a component of Novell GroupWise and provides email services, supporting SMTP, POP, and IMAP protocols. The vulnerability resides in the IMAP component of the GroupWise Internet Agent...

NiX : A Linux Brute Forcer Download

NiX Brute Forcer is a tool that uses brute force in parallel to log into a system without having authentication credentials beforehand. This tool is intended to demonstrate the importance of choosing strong passwords. The goal of NiX is to support a variety of services that allow remote...

Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution

Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Author: Francis Provencher Protek Research Lab's Blog:...

Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution

Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis Provencher Protek Research Lab's WebSite:...

Novell Groupwise Internet Agent IMAP LIST LSUB Code Execution

Exploit for linux platform in category dos / poc ===================================================================== Novell Groupwise Internet Agent IMAP LIST LSUB Command Code Execution ===================================================================== Application: Novell Groupwise Internet...