Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

citadel citadel vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-1756
modules/xmpp/serv_xmpp.c in Citadel 7.86 and previous versions does not properly detect recursion during entity expansion, which allows remote malicious users to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested ...
Citadel CitadelCitadel Citadel 7.80Citadel Citadel 7.81Citadel Citadel 7.82Citadel Citadel 7.84Citadel Citadel 7.50Citadel Citadel 7.60Citadel Citadel 7.11
NA
CVE-2009-0364
Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions prior to 7.39, allows remote malicious users to execute arbitrary code via unspecified vectors.
Citadel WebcitCitadel Webcit 7.10Citadel Webcit 7.02Citadel Webcit 7.11Citadel Webcit 7.12Citadel Webcit 7.22Citadel Webcit 7.37
NA
CVE-2004-1192
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and previous versions allows remote malicious users to execute arbitrary code via format string specifiers sent to the server.
Citadel Ux 6.23Citadel Ux 6.24Citadel Ux 6.26Citadel Ux 6.07Citadel Ux 6.08Citadel Ux 6.27
NA
CVE-2004-1705
Buffer overflow in Citadel/UX 6.23 and previous versions allows remote malicious users to cause a denial of service via a long username.
Citadel Ux 6.08Citadel Ux 6.23Citadel Ux 5.90Citadel Ux 5.91Citadel Ux 6.07
5.4
CVSSv3
CVE-2023-44272
A cross-site scripting vulnerability exists in Citadel versions before 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
Citadel Citadel
6.1
CVSSv3
CVE-2020-27741
Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote malicious users to inject arbitrary web script or HTML via multiple pages and parameters. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabil...
Citadel Webcit
6.5
CVSSv3
CVE-2020-27742
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote malicious users to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security V...
Citadel Webcit
5.9
CVSSv3
CVE-2020-29547
An issue exists in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure.
Citadel Webcit
NA
CVE-2008-0394
Buffer overflow in Citadel SMTP server 7.10 and previous versions allows remote malicious users to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information.
Citadel Smtp
NA
CVE-2002-0432
Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and previous versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.
Citadel Ux
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook