DSA-1430-1 libnss-ldap - information disclosure

Bulletin has no description...

Debian DSA-1410-1 : ruby1.8 - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

Debian DSA-1412-1 : ruby1.9 - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1411-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

DSA-1411-1 libopenssl-ruby - possible man-in-the-middle attacks

Bulletin has no description...

DSA-1412-1 ruby1.9 - possible man-in-the-middle attacks

Bulletin has no description...

Design/Logic Flaw

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

CVE-2007-6101

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

CVE-2007-6101

CVE-2007-6101 affects Ability Mail Server up to version 2.61 (i.e., before 2.61). The vulnerability arises in two areas: (1) IMAP commands with malformed number list ranges and (2) messages containing a blank string. Both issues can be exploited by remote authenticated users to cause a denial of ...

CVE-2007-6101

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service daemon crash via 1 malformed number list ranges in unspecified IMAP commands, and possibly 2 a blank string in unspecified messages...

Ubuntu 6.06 LTS / 6.10 / 7.04 : evolution-data-server vulnerability (USN-475-1)

Philip Van Hoof discovered that the IMAP client in Evolution did not correctly verify the SEQUENCE value. A malicious or spoofed server could exploit this to execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding description block directly from...

Ubuntu 5.04 / 5.10 / 6.06 LTS : mutt vulnerability (USN-307-1)

TAKAHASHI Tamotsu discovered that mutt's IMAP backend did not sufficiently check the validity of namespace strings. If an user connects to a malicious IMAP server, that server could exploit this to crash mutt or even execute arbitrary code with the privileges of the mutt user. Note that Tenable...

GLSA-200711-04 : Evolution: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200711-04 Evolution: User-assisted remote execution of arbitrary code The imaprescan function of the file camel-imap-folder.c does not properly sanitize the 'SEQUENCE' response sent by an IMAP server before being used to index...

Fedora 8 : ruby-1.8.6.111-1.fc8 (2007-2812)

This release contains another fixes of CVE-2007-5162 for Net::FTPTLS, Net::Telnet and Net::IMAP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Debian DSA-1398-1 : perdition - format string error

Bernhard Mueller of SEC Consult has discovered a format string vulnerability in perdition, an IMAP proxy. This vulnerability could allow an unauthenticated remote user to run arbitrary code on the perdition server by providing a specially formatted IMAP tag. %NASLMINLEVEL 70300 C Tenable Network...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...

FreeBSD : perdition -- str_vwrite format string vulnerability (617a4021-8bf0-11dc-bffa-0016179b2dd5)

SEC-Consult reports : Perdition IMAP is affected by a format string bug in one of its IMAP output-string formatting functions. The bug allows the execution of arbitrary code on the affected server. A successful exploit does not require prior authentication. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Core 6 : ruby-1.8.5.114-1.fc6 (2007-738)

This release contains another fixes of CVE-2007-5162 for Net::FTPTLS, Net::Telnet and Net::IMAP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : evolution-data-server-1.10.2-3.fc7 (2007-0464)

This update fixes a security flaw in Evolution's IMAP module. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...