EUVD-2020-16782

Malware in sbrugna...

TitanHQ SpamTitan Email Security Gateway 安全漏洞

TitanHQ SpamTitan Email Security Gateway is an email security gateway from TitanHQ Ireland. A security vulnerability exists in TitanHQ SpamTitan Email Security Gateway versions 8.00.x prior to 8.00.101 and 8.01.x prior to 8.01.14, which stems from a vulnerability in quarantine.php that allows an...

CVE-2024-45438

TitanHQ SpamTitan Email Security Gateway versions 8.00.x before 8.00.101 and 8.01.x before 8.01.14 are vulnerable to an improper access control issue. The quarantine.php file allows unauthenticated users to perform account-level actions via a crafted GET request . Specifically, providing a non-ex...

CVE-2020-24046

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating...

CVE-2020-24045

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual...

Design/Logic Flaw

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating...

Design/Logic Flaw

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual...

CVE-2020-24046

The CVE-2020-24046 entry concerns TitanHQ SpamTitan Gateway 7.07. A sandbox escape allows an authenticated attacker to escalate to root by abusing the web interface Backup/Import Backup to modify /var/tmp/admin.passwd and then rewrite the admin user’s GUID to 0 and switch the restricted shell fro...

CVE-2020-24046

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating...

CVE-2020-24045

CVE-2020-24045 affects TitanHQ SpamTitan Gateway 7.07. The vulnerability arises from a sandbox escape in the restricted admin shell: when a fake VMware Tools ISO image is mounted in the guest VM, and the hidden VMware Tools install path vmware-freebsd-tools/vmware-tools-distrib/vmware-install.pl ...

CVE-2020-24045

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual...

CVE-2020-24046: Improper Privilege Management

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating...

CVE-2020-24045: Insufficient Verification of Data Authenticity

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual...

PT-2020-15627

Name of the Vulnerable Software and Affected Versions TitanHQ SpamTitan Gateway version 7.07 Description A sandbox escape issue allows an authenticated attacker to bypass the restricted shell and gain root access. The restricted shell limits the admin user to executing a small number of tools...

PT-2020-15626

Name of the Vulnerable Software and Affected Versions TitanHQ SpamTitan Gateway version 7.07 Description A sandbox escape issue was discovered, allowing an attacker to bypass the restricted shell by presenting a fake vmware-tools ISO image to the guest virtual machine. This ISO image must contain...

SpamTitan Unauthenticated RCE

TitanHQ SpamTitan Gateway is an anti-spam appliance that protects against unwanted emails and malwares. This module exploits an improper input sanitization in versions 7.01, 7.02, 7.03 and 7.07 to inject command directives into the SNMP configuration file and get remote code execution as root. No...