232 matches found
[SECURITY] Fedora 22 Update: php-horde-ingo-3.2.7-1.fc22
Ingo is an email-filter management application. It is fully internationalized, integrated with Horde and the IMP Webmail client, and supports both server-side Sieve, Procmail, Maildrop and client-side IMAP message filtering...
Mac OS X < 10.11 Multiple Vulnerabilities
Binary data 8982.prm...
SUSE: Security Advisory for procmail (SUSE-SU-2014:1137-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2014-1172)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-408)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-46-1 : procmail update
Boris 'pi' Piwinger and Tavis Ormandy reported a heap overflow vulnerability in procmail's formail utility when processing specially crafted email headers. A remote attacker could use this flaw to cause formail to crash, resulting in a denial of service or data loss, or possibly execute arbitrary...
Vulnerability tracking: how to check and fix the Ghost vulnerability-vulnerability warning-the black bar safety net
Number CVE-2 0 1 5-0 2 3 5 The Ghost vulnerability is a Qualys researcher discovered a Linux service on a very serious security vulnerability that can be exploited for remote code execution and local elevation of Privilege. ! Vulnerability brief description The vulnerability exists in the library...
ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-004: EMC M&R Watch4Net Multiple Vulnerabilities EMC Identifier: ESA-2015-004 CVE Identifier: CVE-2015-0513, CVE-2015-0514, CVE-2015-0515, CVE-2015-0516, CVE-2014-4288, CVE-2014-6456, CVE-2014-6457, CVE-2014-6458, CVE-2014-6466, CVE-2014-6468,...
Oracle Solaris Third-Party Patch Update : procmail (cve_2014_3618_buffer_errors)
The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted email header, related to...
Mail Transfer Agent and Mail Delivery Agent Remote Command Execution via Shellshock
The remote host appears to be running a mail transfer or mail delivery agent such as Courier, Exim, Postfix, or Procmail. Many of these agents can be configured to run utility scripts for a diverse number of tasks including filtering, sorting, and delivering mail. These scripts may create the...
Amazon Linux AMI : procmail (ALAS-2014-408)
A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send an email with specially crafted headers that, when processed by formail, could cause procmail to crash or, possibly, execute arbitrary code as the user running formail. CVE-2014-3618 C Tenable...
Fedora Update for procmail FEDORA-2014-10359
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : procmail-3.22-36.fc19 (2014-10359)
This is an update fixing CVE-2014-3618. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
[SECURITY] Fedora 19 Update: procmail-3.22-36.fc19
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
[SECURITY] Fedora 21 Update: procmail-3.22-36.fc21
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
Fedora 21 : procmail-3.22-36.fc21 (2014-10142)
This is an update fixing CVE-2014-3618. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Important: procmail
Issue Overview: A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send an email with specially crafted headers that, when processed by formail, could cause procmail to crash or, possibly, execute arbitrary code as the user running formail...
SuSE 11.3 Security Update : procmail (SAT Patch Number 9689)
procmail was updated to fix a security issue in its formail helper. - When formail processed specially crafted e-mail headers a heap corruption could be triggered, which would lead to a crash of formail. CVE-2014-3618 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Fedora 20 : procmail-3.22-36.fc20 (2014-10357)
This is an update fixing CVE-2014-3618. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...