 |
|
|
|
Multiple MailEnable vulnerabilities
updated since 20.03.2006 | | Published: |  | 21.03.2006 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 5914 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | POP3 authentication vulnerability, crossite scripting, information leak. |
| Affected: |  | MAILENABLE : MailEnable Standard 1.93 | | | | MAILENABLE : MailEnable Professional 1.73 | | | | MAILENABLE : MailEnable Enterprise 1.21 | | CVE: |  | CVE-2006-6964 (MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.) | | | | CVE-2006-1792 (Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337.) | | | | CVE-2006-1337 (Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.) |
| X.org / X11 X server privilege escalation | | Published: | | 21.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5915 | | Type: | | local | | Level: | | 8/10 | | Description: | | By using -modulepath it's possible to specify shared libraries location to attach user's library to suid application. |
| Gnome Screensaver protection bypass | | Published: | | 21.03.2006 | | Source: | | SECUNIA | | SecurityVulns ID: | | 5919 | | Type: | | local | | Level: | | 5/10 | | Description: | | It's possible to kill screensaver with hotkey combination if server is running with AllowDeactivateGrabs and AllowClosedownGrabs option set. |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 21.03.2006 | | Source: | | | | SecurityVulns ID: | | 5920 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
Multiple Symantec Veritas Backup Exec backup agent vulnerabilities
updated since 18.03.2006 | | Published: | | 21.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5906 | | Type: | | remote | | Level: | | 5/10 | | Description: | | DoS, format string vulnerabilities. |
| Verisign multiple digital certificates managing products crossite scripting | | Published: | | 21.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5916 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Crossite scripting with haydn.exe CGI component. |
| FreeRADIUS EAP authentication bypass and DoS | | Published: | | 21.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5917 | | Type: | | remote | | Level: | | 5/10 | | Description: | | EAP-MSCHAPv2 implementation problems. |
F5 Firepass 4100 SSL VPN crossite scripting
updated since 21.03.2006 | | Published: | | 21.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5918 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Web interface crossite scripting. |
Gnome Evolution mail client DoS
updated since 28.01.2006 | | Published: | | 21.03.2006 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 5708 | | Type: | | client | | Level: | | 5/10 | | Description: | | Inline text attachment with oversized string causes application to hang. |
|
|
|
|
|
|
|
|
