MHonArc 2.6.16 - Tag Nesting Remote Denial of Service

source: https://www.securityfocus.com/bid/46923/info MHonArc is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to consume all CPU resources, denying service to legitimate users. MHonArc versions 2.6.16 and prior are vulnerable. dydydydy...

Debian Security Advisory DSA 221-1 (mhonarc)

The remote host is missing an update to mhonarc announced via advisory DSA 221-1. OpenVAS Vulnerability Test $Id: deb2211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 221-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 199-1 (mhonarc)

The remote host is missing an update to mhonarc announced via advisory DSA 199-1. OpenVAS Vulnerability Test $Id: deb1991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 199-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 163-1 (mhonarc)

The remote host is missing an update to mhonarc announced via advisory DSA 163-1. OpenVAS Vulnerability Test $Id: deb1631.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 163-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-163)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 199-1 (mhonarc)

The remote host is missing an update to mhonarc announced via advisory DSA 199-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-221)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-199-1 : mhonarc - XSS

Steven Christey discovered a cross site scripting vulnerability in mhonarc, a mail to HTML converter. Carefully crafted message headers can introduce cross site scripting when mhonarc is configured to display all headers lines on the web. However, it is often useful to restrict the displayed head...

Debian DSA-163-1 : mhonarc - XSS

Jason Molenda and Hiromitsu Takagi foundways to exploit cross site scripting bugs in mhonarc, a mail to HTML converter. When processing maliciously crafted mails of type text/html mhonarc does not deactivate all scripting parts properly. This is fixed in upstream version 2.5.3. If you are worried...

Debian DSA-221-1 : mhonarc - XSS

Earl Hood, author of mhonarc, a mail to HTML converter, discovered a cross site scripting vulnerability in this package. A specially crafted HTML mail message can introduce foreign scripting content in archives, by-passing MHonArc's HTML script filtering. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2002-1307

Summary: CVE-2002-1307 is a cross-site scripting (XSS) vulnerability in MHonArc versions 2.5.12 and earlier, exploitable when an email message contains a script embedded in a MIME header name. The issue allows remote attackers to inject script/HTML via headers, with the impact of partial confiden...

CVE-2002-1388

CVE-2002-1388 is a cross-site scripting vulnerability in MHonArc prior to 2.5.14 that lets remote attackers inject arbitrary HTML into web archive pages via HTML mail messages. The issue arises in the mhonarc HTML filter when processing HTML mail, enabling foreign scripting content in archives. D...

CVE-2002-1388

Cross-site scripting XSS vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages via HTML mail messages...

CVE-2002-1307

Cross-site scripting vulnerability XSS in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name...

CVE-2002-1307

Cross-site scripting vulnerability XSS in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name...

CVE-2002-1388

Cross-site scripting XSS vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages via HTML mail messages...

CVE-2002-0738

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by 1 splitting the SCRIPT tag into smaller pieces, 2 including the script in a SRC argument to an IMG tag, or 3 using "&=script" syntax...

CVE-2002-0738

CVE-2002-0738 concerns MHonArc up to version 2.5.2 and earlier, where archiving HTML mail could allow remote script execution in web clients. The root cause is inadequate filtering of Javascript within archived messages, enabling tricks such as breaking SCRIPT tags, using SCRIPT in an IMG SRC, or...

CVE-2002-0738

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by 1 splitting the SCRIPT tag into smaller pieces, 2 including the script in a SRC argument to an IMG tag, or 3 using "&=script" syntax...

[SECURITY] [DSA 221-1] New mhonarc packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 221-1 [email protected] http://www.debian.org/security/ Martin Schulze January 3rd, 2003 http://www.debian.org/security/faq -...