19 matches found
EUVD-2006-1145
Malware in sbrugna...
EUVD-2002-1397
Malware in sbrugna...
qmailadmin 1.0.x Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5404/info The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition. It is meant to run as a CGI program and is typically installed setuid owned by root on some systems, regular users on...
Vpopmail/QmailAdmin User's Quota Multiple Integer Overflows
Author: Jacobo Avariento Gimeno Sofistic S.L. Contact: jacobo at sofistic.net Release Date: May 8, 2009 CVE/bugtraq id: Not assigned yet Severity: Low/Medium Vendor's Description of Software: ------------------------------------------------------------------------------------- „Vpopmail is a free...
Gentoo Security Advisory GLSA 200611-15 (qmailadmin)
The remote host is missing updates announced in advisory GLSA 200611-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200611-15 (qmailadmin)
The remote host is missing updates announced in advisory GLSA 200611-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200611-15 : qmailAdmin: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200611-15 qmailAdmin: Buffer overflow qmailAdmin fails to properly handle the 'PATHINFO' variable in qmailadmin.c. The PATHINFO is a standard CGI environment variable filled with user-supplied data. Impact : A remote attacker coul...
qmailAdmin: Buffer overflow
Background qmailAdmin is a free software package that provides a web interface for managing a qmail system with virtual domains. Description qmailAdmin fails to properly handle the "PATHINFO" variable in qmailadmin.c. The PATHINFO is a standard CGI environment variable filled with user supplied...
Buffer overflow
Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATHINFO environment variable...
CVE-2006-1141
Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATHINFO environment variable...
CVE-2006-1141
CVE-2006-1141 affects QmailAdmin prior to 1.2.10. The vulnerability is a buffer overflow in qmailadmin.c where an overlong PATH_INFO CGI environment variable can be exploited by a remote attacker to potentially execute arbitrary code with the privileges of the running qmailAdmin process. Affected...
CVE-2006-1141
Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATHINFO environment variable...
CVE-2002-1414
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMINTEMPLATEDIR environment variable...
CVE-2002-1414
CVE-2002-1414 describes a buffer overflow in qmailadmin exploited by passing a long QMAILADMIN_TEMPLATEDIR environment variable, enabling local users to gain privileges. The vulnerability details indicate local attack vector with the potential for partial impact on confidentiality, integrity, and...
CVE-2002-1414
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMINTEMPLATEDIR environment variable...
qmailadmin SUID buffer overflow
qmailadmin is not part of qmail. It's from http://inter7.com/qmailadmin/ and I guess you can download from there and play with it, although the versions I am using were built from the FreeBSD ports tree and also from a Linux RPM I grabbed from:...
Buffer overflow in qmailadmin
Buffer overflow on environment variables parsing...
qmailadmin 1.0.x - Local Buffer Overflow
qmailadmin 1.0.x - Local Buffer Overflow / source: https://www.securityfocus.com/bid/5404/info The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition. It is meant to run as a CGI program and is typically installed setuid owned by root on some systems, regular...
qmailadmin 1.0.x - Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/5404/info The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition. It is meant to run as a CGI program and is typically installed setuid owned by root on some systems, regular users on others. qmailadmin fails to...