Lucene search
+L

194 matches found

myhack58
myhack58
•added 2009/01/13 12:00 a.m.•26 views

The use of the hamster hijacking Gmail(sidejacking)-vulnerability warning-the black bar safety net

4 month released, the software DESCRIPTION is tempting: "The black hat of the General Assembly after the outgoing of a tool to Ferret it. The author claims that you can use him to intercept mail login process the cookie information. Then you can feel free to invade the others mailbox. Worked at t...

7.2AI score
SaveExploits0
OSV
OSV
•added 2008/10/15 8:08 p.m.•9 views

DEBIAN-CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

5CVSS6.5AI score0.01679EPSS
SaveExploits0References1
OSV
OSV
•added 2008/10/15 8:08 p.m.•10 views

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

6.2AI score
SaveExploits0References10
attackerkb
attackerkb
•added 2008/10/15 8:08 p.m.•7 views

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

5CVSS5.5AI score0.01679EPSS
SaveExploits0References11
Debian CVE
Debian CVE
•added 2008/10/15 8:00 p.m.•56 views

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

5CVSS6.3AI score0.01679EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/15 12:00 a.m.•4 views

CVE-2008-4578: Undefined Security Weakness

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes...

5CVSS5.9AI score0.01679EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2008/05/20 2:28 p.m.•17 views

Directory traversal in dovecot with zlib plugin

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

4.3CVSS6AI score0.02123EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2008/01/17 12:00 a.m.•29 views

Debian: Security Advisory (DSA-197)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.6CVSS7.2AI score0.0034EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2007/11/13 11:00 p.m.•86 views

CVE-2007-5794

Removed by vendor...

4.3CVSS5.8AI score0.01164EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2007/10/17 12:00 a.m.•8 views

openSUSE 10 Security Update : dovecot (dovecot-3135)

A bug in dovecot allowed users to read compressed mailboxes of other users under certain circumstances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-3135. The text description of th...

5.4AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2007/04/25 3:19 p.m.•29 views

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

4.3CVSS6.1AI score0.02123EPSS
SaveExploits0References2
OSV
OSV
•added 2007/04/25 3:19 p.m.•15 views

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

6.4AI score
SaveExploits0References14
Prion
Prion
•added 2007/04/25 3:19 p.m.•26 views

Directory traversal

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

4.3CVSS6.5AI score0.02123EPSS
SaveExploits0References14Affected Software1
NVD
NVD
•added 2007/04/25 3:19 p.m.•23 views

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

4.3CVSS6.4AI score0.02123EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2007/04/25 3:00 p.m.•52 views

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

6.3AI score0.02123EPSS
SaveExploits0References14
Debian CVE
Debian CVE
•added 2007/04/25 3:00 p.m.•71 views

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

4.3CVSS6.3AI score0.02123EPSS
SaveExploits0
NVD
NVD
•added 2007/04/02 11:19 p.m.•27 views

CVE-2007-1823

T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

10CVSS6.7AI score0.01975EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/04/02 11:00 p.m.•40 views

CVE-2007-1823

T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

6.7AI score0.01975EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/04/02 11:00 p.m.•39 views

CVE-2007-1822

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

6.7AI score0.03058EPSS
SaveExploits0References2
CVE
CVE
•added 2007/04/02 11:00 p.m.•75 views

CVE-2007-1823

CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...

10CVSS6.7AI score0.01975EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder