1817 matches found
Gentoo Security Advisory GLSA 201412-32
Gentoo Linux Local Security Checks GLSA 201412-32 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
AIX 5.3 TL 12 : sendmail (IV75967) (Logjam)
The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHEEXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful...
AIX 7.1 TL 2 : sendmail (IV75645) (Logjam)
The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHEEXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful...
AIX 6.1 TL 9 : sendmail (IV75643) (Logjam)
The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHEEXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful...
AIX 6.1 TL 8 : sendmail (IV75644) (Logjam)
The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHEEXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful...
Vulnerability in Diffie-Hellman ciphers affects sendmail on AIX,Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
IBM SECURITY ADVISORY First Issued: Fri Aug 7 15:15:59 CDT 2015 |Updated: Tue Aug 18 09:19:51 CDT 2015 |Update: Added AIX 5.3 vulnerability information The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory2.asc...
OracleVM 3.3 : net-snmp (OVMSA-2015-0099)
The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...
Vulnerability in SSLv3 affects AIX,Vulnerability in SSLv3 affects VIOS
IBM SECURITY ADVISORY First Issued: Wed Jun 17 09:52:06 CDT 2015 |Updated: Tue Mar 1 10:07:14 CST 2016 |Update: Modified the impacted upper level fileset for 7.1.3 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nettcpadvisory.asc...
[KIS-2015-01] Concrete5 <= 5.7.3.1 (sendmail) Remote Code Execution Vulnerability
------------------------------------------------------------------- Concrete5 = 5.7.3.1 sendmail Remote Code Execution Vulnerability ------------------------------------------------------------------- - Software Link: https://www.concrete5.org/ - Affected Versions: Version 5.7.3.1 and probably...
Concrete CMS: Sendmail Remote Code Execution Vulnerability in Concrete5 version 5.7.3.1
Concrete5 is vulnerable to a Remote Code Execution because it fails to properly validate certain user input used as sender email address when sending out a registration notification email. This vulnerability is mitigated by the fact that it can be exploited only by authenticated administrator use...
Mandriva Linux Security Advisory : sendmail (MDVSA-2015:128)
Updated sendmail packages fix security vulnerability : Sendmail before 8.14.9 does not properly closing file descriptors before executing programs. This bug could enable local users to interfere with an open SMTP connection if they can execute their own program for mail delivery e.g., via procmai...
IT-Grundschutz M5.019: Einsatz der Sicherheitsmechanismen von sendmail
IT-Grundschutz M5.019: Einsatz der Sicherheitsmechanismen von sendmail. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5019.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 5.019 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...
IT-Grundschutz M5.019: Einsatz der Sicherheitsmechanismen von sendmail
IT-Grundschutz M5.019: Einsatz der Sicherheitsmechanismen von sendmail. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Oracle Solaris Third-Party Patch Update : sendmail (cve_2014_3956_information_disclosure)
The remote Solaris system is missing necessary patches to address security updates : - The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended...
Ubuntu 14.04 LTS : bsd-mailx vulnerability (USN-2455-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2455-1 advisory. It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could...
USN-2455-1: bsd-mailx vulnerability
It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could possibly use this issue with a valid email address to execute arbitrary commands. This functionality has now been disabled by default, and...
USN-2455-1 bsd-mailx vulnerability
It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could possibly use this issue with a valid email address to execute arbitrary commands. This functionality has now been disabled by default, and...
GLSA-201412-32 : sendmail: Information disclosure
The remote host is affected by the vulnerability described in GLSA-201412-32 sendmail: Information disclosure The smcloseonexec function in conf.c has arguments in the wrong order. Impact : A local attacker could get access to unintended high-numbered file descriptors via a specially crafted...
sendmail: Information disclosure
Background sendmail is a widely-used Mail Transport Agent MTA. Description The smcloseonexec function in conf.c has arguments in the wrong order. Impact A local attacker could get access to unintended high-numbered file descriptors via a specially crafted program. Workaround There is no known...
Solaris 10 (x86) : 151075-06 (deprecated)
SunOS 5.10x86: sendmail patch. Date this patch was last updated by Sun : May/11/17 This plugin has been deprecated and either replaced with individual 151075 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...