160 matches found
GLSA-200506-02 : Mailutils: SQL Injection
The remote host is affected by the vulnerability described in GLSA-200506-02 Mailutils: SQL Injection When GNU Mailutils is built with the 'mysql' or 'postgres' USE flag, the sqlescapestring function of the authentication module fails to properly escape the '' character, rendering it vulnerable t...
Mailutils: SQL Injection
Background GNU Mailutils is a collection of mail-related utilities. Description When GNU Mailutils is built with the "mysql" or "postgres" USE flag, the sqlescapestring function of the authentication module fails to properly escape the "" character, rendering it vulnerable to a SQL command...
[SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 732-1 [email protected] http://www.debian.org/security/ Martin Schulze June 3rd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 732-1 [email protected] http://www.debian.org/security/ Martin Schulze June 3rd, 2005 http://www.debian.org/security/faq -...
DSA-732-1 mailutils - several
Bulletin has no description...
CVE-2005-1824
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
CVE-2005-1824
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
CVE-2005-1824
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
CVE-2005-1824
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
CVE-2005-1824
CVE-2005-1824 affects GNU Mailutils when built with the mysql or postgres USE flag: the sql_escape_string function in the mailutils auth/sql.c module fails to properly escape the backslash, enabling SQL command injection. Impact: a remote attacker could inject SQL commands into the underlying dat...
CVE-2005-1824
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
DEBIAN-CVE-2005-1824
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
CVE-2005-1824: Undefined Security Weakness
The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...
GLSA-200505-20 : Mailutils: Multiple vulnerabilities in imap4d and mail
The remote host is affected by the vulnerability described in GLSA-200505-20 Mailutils: Multiple vulnerabilities in imap4d and mail infamous41d discovered several vulnerabilities in GNU Mailutils. imap4d does not correctly implement formatted printing of command tags CAN-2005-1523, fails to...
Mailutils: Multiple vulnerabilities in imap4d and mail
Background GNU Mailutils is a collection of mail-related utilities, including an IMAP4 server imap4d and a Mail User Agent mail. Description infamous41d discovered several vulnerabilities in GNU Mailutils. imap4d does not correctly implement formatted printing of command tags CAN-2005-1523, fails...
CVE-2005-1523
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...
CVE-2005-1521
CVE-2005-1521 affects GNU Mailutils 0.5/0.6 and earlier than 0.6.90. The description identifies an integer overflow in the imap4d fetch_io function that can cause a heap-based buffer overflow, enabling a remote attacker to execute arbitrary code via a partial message request with a large END para...
CVE-2005-1521
Integer overflow in the fetchio function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow...
CVE-2005-1523
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...
CVE-2005-1520
Buffer overflow in the headergetfieldname function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail...