Gentoo Security Advisory GLSA 200603-21 (sendmail)

The remote host is missing updates announced in advisory GLSA 200603-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

sSMTP 'from_format()'未初始化内存信息泄漏漏洞

BUGTRAQ ID: 31094 CVE ID：CVE-2008-3962 CNCVE ID：CNCVE-20083962 Anibal Monsalve Salazar sSMTP是一款sendmail的可替代程序。 sSMTP 'fromformat'存在设计问题，远程攻击者可以利用漏洞获得敏感信息。 'fromformat'利用未初始化内存，可导致敏感信息泄漏。 Gentoo Linux Anibal Monsalve Salazar sSMTP 2.62 可参考如下补丁： https://bugs.gentoo.org/attachment.cgi?id=165005...

FreeBSD Security Advisory (FreeBSD-SA-06:17.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:17.sendmail.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Ports: sendmail

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Security Advisory (FreeBSD-SA-06:13.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:13.sendmail.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-03:13.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:13.sendmail.asc ADV FreeBSD-SA-03:13.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-06:17.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:17.sendmail.asc ADV FreeBSD-SA-06:17.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Ports: sendmail

The remote host is missing an update to the system as announced in the referenced advisory. VID 08ac7b8b-bb30-11da-b2fb-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-03:13.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:13.sendmail.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-06:13.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:13.sendmail.asc ADV FreeBSD-SA-06:13.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

Postfix <= 2.6-20080814 (symlink) Local Privilege Escalation Exploit

No description provided by source. !/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt [email protected] Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf...

Postfix 2.6-20080814 - symlink Local Privilege Escalation

Postfix 2.6-20080814 - symlink Local Privilege Escalation !/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf...

Eudora 6.0.3 Attachment Spoofing Exploit (windows)

No description provided by source. !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.0.3 on Windows spoof, LaunchProtect\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "\n"; print "This is a...

Common left the back door approach-vulnerability warning-the black bar safety net

For us such a dish hand, finally got the servers is not easy, if it is found it miserable. In fact, the open back door methods there are many, below I to talk, I've learned of several ways. 1. Setuid cp /bin/sh /tmp/. root chmod u-s /tmp/. root Add suid bit to the shell on, although very simple,...

ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

Fedora 7 : clamav-0.92-6.fc7 (2008-0170)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Fedora 8 : clamav-0.92-6.fc8 (2008-0115)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Milter Detection

The remote service is a milter, which provides an interface between a mail transfer agent MTA such as sendmail and an application such as SpamAssassin or ClamAV for filtering messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

Debian Security Advisory DSA 1042-1 (cyrus-sasl2)

The remote host is missing an update to cyrus-sasl2 announced via advisory DSA 1042-1. The Mu Security research team discovered a denial of service condition in the Simple Authentication and Security Layer authentication library SASL during DIGEST-MD5 negotiation. This potentially affects multipl...

Debian Security Advisory DSA 1015-1 (sendmail)

The remote host is missing an update to sendmail announced via advisory DSA 1015-1. Mark Dowd discovered a flaw in the handling of asynchronous signals in sendmail, a powerful, efficient, and scalable mail transport agent. This allows a remote attacker may to exploit a race condition to execute...