84 matches found
Code injection
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2013-0289
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
UBUNTU-CVE-2013-0289
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2013-0289
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2013-0289
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2013-0289
Isync 0.4 before 1.0.6 fails to verify the server hostname against the CN/SubjectAltName in the X.509 certificate, enabling MITM spoofing with any valid cert. Affected software: isync prior to 1.0.6. Impact per sources: potential disclosure of passwords and other sensitive data. Mitigation: upgra...
CVE-2013-0289: Undefined Security Weakness
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
GLSA-201310-02 : isync: Man-in-the-Middle attack
The remote host is affected by the vulnerability described in GLSA-201310-02 isync: Man-in-the-Middle attack isync does not properly verify the servers hostname against the CN field in the SSL certificate. Impact : A remote server could perform man-in-the-middle attacks to disclose passwords or...
isync: Man-in-the-Middle attack
Background isync is an IMAP and MailDir mailbox synchronizer. Description isync does not properly verify the server’s hostname against the CN field in the SSL certificate. Impact A remote server could perform man-in-the-middle attacks to disclose passwords or obtain other sensitive information...
Fedora Update for isync FEDORA-2013-2758
Check for the Version of isync OpenVAS Vulnerability Test Fedora Update for isync FEDORA-2013-2758 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for isync FEDORA-2013-2795
Check for the Version of isync OpenVAS Vulnerability Test Fedora Update for isync FEDORA-2013-2795 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for isync FEDORA-2013-2758
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for isync FEDORA-2013-2795
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : isync-1.0.6-1.fc17 (2013-2758)
Wed Feb 20 2013 Fabian Affolter 1.0.6-1 - Updated to new upstream version 1.0.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 18 : isync-1.0.6-1.fc18 (2013-2795)
Wed Feb 20 2013 Fabian Affolter 1.0.6-1 - Updated to new upstream version 1.0.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 17 Update: isync-1.0.6-1.fc17
isync is a command line application which synchronizes mailboxes; currently Maildir and IMAP4 mailboxes are supported. New messages, message deletions and flag changes can be propagated both ways. isync is suitable for use in IMAP-disconnected mode...
[SECURITY] Fedora 18 Update: isync-1.0.6-1.fc18
isync is a command line application which synchronizes mailboxes; currently Maildir and IMAP4 mailboxes are supported. New messages, message deletions and flag changes can be propagated both ways. isync is suitable for use in IMAP-disconnected mode...
Mac OS X <= 10.3.7 mRouter Local Privilege Escalation Exploit
No description provided by source. / fm-iSink.c overflow in mRouter, suid binary used by iSync, on OSX = 10.3.7 written by - nemo @ felinemenace.org - ,'| .-''-.....--'; / '. ..-' , ,--...--''' \ .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' http://pulltheplug.org and...
CVE-2005-0193
CVE-2005-0193 involves a buffer overflow in iSync 1.5 on Mac OS X 10.3.7 and earlier, triggered by the -v and -a switches in mRouter. The vulnerability allows local users to execute arbitrary code. The connected documents confirm the affected software configuration and root cause (buffer overflow...