GLSA-200601-07 : ClamAV: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200601-07 ClamAV: Remote execution of arbitrary code Zero Day Initiative ZDI reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to a...

ClamAV: Remote execution of arbitrary code

Background ClamAV is a GPL virus scanner. Description Zero Day Initiative ZDI reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to an insufficiently sized memory buffer. The flaw occurs when the...

Eudora Internet Mail Server (EIMS) < 3.2.8 Multiple DoS

The remote host appears to be running Eudora Internet Mail Server, a mail server for Macs. According to its banner, the version of Eudora Internet Mail Server EIMS installed on the remote host is reportedly susceptible to denial of service attacks involving malformed NTLM authentication requests ...

Eudora Internet Mail Server < 3.2.8 NTLM Authentication Request DoS

Binary data 3361.prm...

Authentication flaw

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141: Undefined Security Weakness

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2005-4556

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when registerglobals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the 1 langsettings and 2...

CVE-2005-4558

IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users to include...

CVE-2005-4559

mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the defaultlayout and layoutsettings variables when an unrecognized HTTPUSERAGENT string is provided, which allows remote attackers to acce...

CVE-2005-4559

mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the defaultlayout and layoutsettings variables when an unrecognized HTTPUSERAGENT string is provided, which allows remote attackers to acce...

CVE-2005-4558

IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users to include...

CVE-2005-4556

A PHP remote file include vulnerability exists in IceWarp Web Mail 5.5.1 , which is integrated into Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1 . When register_globals is enabled, remote attackers can exploit the lang_settings and language parameters in accounts/inc/in...

CVE-2005-4556

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when registerglobals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the 1 langsettings and 2...

CVE-2005-4557

dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte %00 in the lang parameter, possibly due to a directory traversal vulnerability...

CVE-2005-4558

IceWarp Web Mail 5.5.1 , integrated into Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1 , is vulnerable to an input validation flaw. The software fails to restrict acceptable values for the language parameter in mail/settings.html before storage in a database. This allows...

Multiple Merak Mail Server / Icewarp Web Mail vulnerabilities

Unauthorized access, crossite scripting, unauthorized files deletion, information leak...

CVE-2005-4557: Undefined Security Weakness

dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte %00 in the lang parameter, possibly due to a directory traversal vulnerability...

CVE-2005-4559: Undefined Security Weakness

mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly initialize the defaultlayout and layoutsettings variables when an unrecognized HTTPUSERAGENT string is provided, which allows remote attackers to acce...

CVE-2005-4558: Undefined Security Weakness

IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict acceptable values for the language parameter to mail/settings.html before it is stored in a database, which can allow remote authenticated users to include...