Debian: Security Advisory (DSA-1893-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1893-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 23, 2009 http://www.debian.org/security/faq -...

DSA-1893-1 cyrus-imapd-2.2 kolab-cyrus-imapd - arbitrary code execution

Bulletin has no description...

CVE-2008-4165

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

Design/Logic Flaw

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

The CVE-2008-4165 entry concerns Kolab Groupware Server 1.0.0. The vulnerable component is admin/user/create_user.php, which places a user password in an HTTP GET request. This allows local administrators and possibly remote attackers to obtain cleartext passwords by inspecting the ssl_access_log...

CVE-2007-4510

CVE-2007-4510 affects ClamAV before 0.91.2 (as used in Kolab Server 2.0–2.2beta1 and others). The root causes are NULL pointer dereferences in cli_scanrtf (libclamav/rtf.c) and in cli_html_normalise (libclamav/htmlnorm.c) triggered by a crafted RTF file or a crafted HTML document with a data: URI...

CVE-2005-4828

CVE-2005-4828 affects Kolab Server 2.0.0 and 2.0.1. The issue occurs when a large email contains a dot placed incorrectly, causing kolabfilter to insert an additional dot. This can break clear-text signatures and attachments. The available sources note that it is not clear whether the issue cross...

CVE-2005-4828

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...

Mandrake Linux Security Advisory : kolab-resource-handlers (MDKSA-2006:013)

A problem exists in how the Kolab Server transports emails bigger than 8KB in size and if a dot '.' character exists in the wrong place. If these conditions are met, kolabfilter will double this dot and a modified email will be delivered, which could lead to broken clear-text signatures or broken...

Authentication flaw

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2006-0213

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2006-0213

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2006-0213

Affected product: Kolab Server (versions 2.0.1, 2.0.2 and development builds before 2.1-20051215 and earlier). Root cause: when authenticating users via secure SMTP, credentials are written in plaintext to the postfix.log file. Impact: local users can read credentials and gain privileges. Details...

CVE-2005-4828

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...

CVE-2005-4828

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...

CVE-2004-1997

CVE-2004-1997 : Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be world-readable and allow local users to gain privileges. The NVD entry lists a CVSSv2 base score of 4.6 (LOCAL access, LOW attack complexity, PARTIAL confidentiality/integrity/availability impacts). ...

CVE-2004-1997

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges...

Mandrake Linux Security Advisory : kolab-server (MDKSA-2004:052)

Luca Villani reported the disclosure of critical configuration information within Kolab, the KDE Groupware server. The affected versions store OpenLDAP passwords in plain text. The heart of Kolab is an engine written in Perl that rewrites configuration for certain applications based on templates...