[SECURITY] Fedora 21 Update: clamav-0.98.5-1.fc21

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 21 Update: thunderbird-31.3.0-1.fc21

Mozilla Thunderbird is a standalone mail and newsgroup client...

Debian: Security Advisory (DSA-3091-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

U-mail邮件系统又一getshell

简要描述： U-mail邮件系统某处处理不当，导致getshell 详细说明： 版本：U-Mail for Windows V9.8.57 测试帐号：[email protected] 测试主机：windows server 2003+IIS6 windows主机配置都为邮件系统默认配置 首先需要获取用户的UserID，因为其缓存目录路径为 umail\WorldClient\html\client\cache\userid\ 获取用户id的接口为...

[SECURITY] [DLA 100-1] mutt security update

Package : mutt Version : 1.5.20-9+squeeze4 CVE ID : CVE-2014-0467 Debian Bug : 771125 A flaw was discovered in mutt, a text-based mailreader. A specially crafted mail header could cause mutt to crash, leading to a denial of service condition...

Updated mutt packages fix CVE-2014-9116

Updated mutt packages fix security vulnerability: A flaw was discovered in mutt. A specially crafted mail header could cause mutt to crash, leading to a denial of service condition CVE-2014-9116. The mutt package has been updated to version 1.5.23 and patched to fix this issue...

DLA-100-1 mutt - security update

Bulletin has no description...

[SECURITY] Fedora 20 Update: thunderbird-31.3.0-1.fc20

Mozilla Thunderbird is a standalone mail and newsgroup client...

U-Mail最新版任意文件下载漏洞

简要描述： 下载了最新版的umail，发现漏洞还不少，不过上wooyun一搜索，都是以前大牛提交过了，只好另找一个了。任意文件下载，泄露系统重要敏感信息，还可导致可下载任意用户的全部邮件。u-mail的使用量就不说了，可以参考： http://www.wooyun.org/bugs/wooyun-2010-061859 详细说明： 问题出现的位置是在图片预览的地方...

SuSE 11.3 Security Update : LibreOffice (SAT Patch Number 10001)

LibreOffice was updated to fix two security issues. These security issues have been fixed : - 'Document as E-mail' vulnerability. bnc900218 - Impress remote control use-after-free vulnerability. CVE-2014-3693 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Important: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Design/Logic Flaw

models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header...

CVE-2014-9182

models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header...

CVE-2014-9182

Anchor CMS 0.9.2 and earlier is affected by CVE-2014-9182 due to a header-injection flaw in models/comment.php. The vulnerability arises from building mail headers using a Host header value, enabling remote attackers to inject arbitrary headers into outgoing mail messages via CRLF manipulation. T...

CVE-2014-9182

models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header...

RelateIQ Bug Bounty #1 - Persistent Signup Vulnerability

Document Title: =============== RelateIQ Bug Bounty 1 - Persistent Signup Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1320 Video: http://www.vulnerability-lab.com/getcontent.php?id=1332 Release Date: ============= 2014-12-02 Vulnerabili...

Debian DSA-3083-1 : mutt - security update

A flaw was discovered in mutt, a text-based mailreader. A specially crafted mail header could cause mutt to crash, leading to a denial of service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

BookFresh - Persistent Clients Invite Vulnerability

Document Title: =============== BookFresh - Persistent Clients Invite Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1351 Release Date: ============= 2014-10-28 Vulnerability Laboratory ID VL-ID: ==================================== 1351...

USN-2427-1 libksba vulnerability

Hanno Böck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code...

[SECURITY] Fedora 19 Update: clamav-0.98.5-1.fc19

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...