CVE-2010-4524

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi
• lists.mandriva.com/security-announce/2011-01/msg00004.php
• openwall.com/lists/oss-security/2010/12/21/4 · Exploit
• openwall.com/lists/oss-security/2010/12/21/7
• openwall.com/lists/oss-security/2010/12/22/4 · Exploit
• openwall.com/lists/oss-security/2010/12/22/5 · Patch
• savannah.nongnu.org/bugs
• secunia.com/advisories/42694
• mail-archive.com/mhonarc-dev%40mhonarc.org/msg01296.html
• securityfocus.com/bid/45528
• vupen.com/english/advisories/2010/3344 · Vendor Advisory
• vupen.com/english/advisories/2011/0067
• bugzilla.redhat.com/show_bug.cgi · Exploit

mhonarc のその他の脆弱性

• CVE-2010-1677中 5.0MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags…
• CVE-2002-1388中 4.3Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages vi…
• CVE-2002-1307中 6.8Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message…
• CVE-2002-0738高 7.5MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute s…