423 matches found
CVE-2001-1361
The CVE-2001-1361 entry concerns The Web Information Gateway (TWIG) 2.7.1, described as potentially related to incorrect security rights and/or the generation of mailto links. Based on the connected documents, there are no additional technical specifics (no explicit root cause details, affected s...
CVE-2001-1361
Vulnerability in The Web Information Gateway TWIG 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links...
HTML injection via mailto: URL Interenet Explorer
It's possible to inject HTML text into mailto: reference...
CVE-2001-1188
The CVE-2001-1188 entry concerns mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier. The vulnerability arises because remote attackers can modify hidden form fields (sendto, email, server, subject, resulturl) to cause the program to send SPAM via remote servers. Affected component is the mail...
CVE-2001-1188
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...
Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use
Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use source: https://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in...
Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use
source: https://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in MAILTO which could allow an attacker to send emails through a...
CVE-2001-1361
Vulnerability in The Web Information Gateway TWIG 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links...
CVE-2000-0878
The CVE-2000-0878 entry notes a vulnerability in a mailto CGI script where a remote attacker can execute arbitrary commands through shell metacharacters in the emailadd form field. This is a remote code execution risk stemming from unsafely handling input in a CGI script. The issue is described w...
CVE-2000-0930
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch...
CVE-2000-0878
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field...
Дырка в Pegasus Mail
Если ссылки mailto: обрабатываются Pegasus Mail, то с помощью подобной ссылки можно отправить любой файл с компьютера пользователя по любому адресу без подтверждения пользователем...
CVE-1999-0872
CVE-1999-0872 is a vulnerability in Vixie cron where a buffer overflow can be triggered by a long MAILTO value in a crontab, enabling local users to gain root access. The Red Hat CVE entry and related records confirm the issue but do not provide remediation steps or patched versions in the connec...
CVE-1999-0872
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file...
CVE-1999-0768
Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable...
CVE-1999-0768
CVE-1999-0768 is a confirmed issue affecting Red Hat systems using Vixie Cron, where a buffer overflow can be triggered via the MAILTO environment variable. The connected Red Hat advisory reiterates the same description and confirms the vulnerability exists in Vixie Cron on Red Hat platforms. The...
CVE-1999-0769
CVE-1999-0769 affects Vixie Cron on Linux systems. The vulnerability allows local users to modify parameters of sendmail commands by manipulating the MAILTO environment variable, as described in multiple sources. Root cause is misuse of MAILTO by cron the environment passed to mail-related comman...
cron_bof.txt
Subject: Re: RHSA-1999:030-01 Buffer overflow in cron daemon To: [email protected] On Wed, 25 Aug 1999, Bill Nottingham wrote: To the best of our knowledge, no known exploits exist at this time. Also, it was possible to use specially formatted 'MAILTO' environment variables to send comman...
RedHat Linux 4.25.26.0 S.u.S.E Linux 6.06.1 - Cron Buffer Overflow (1)
RedHat Linux 4.25.26.0 S.u.S.E Linux 6.06.1 - Cron Buffer Overflow 1 // source: https://www.securityfocus.com/bid/602/info The version of Vixie cron that ships with RedHat versions 4.2, 5.2 and 6.0 is vulnerable to a local buffer overflow attack. By utilizing the MAILTO environment variable, a...