ecartis ecartis 0.129a vulnerabilities and exploits

(subscribe to this query)

Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and previous versions allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, ...

Ecartis Ecartis 1.0.0 Snapshot 2002-01-25 Listar Listar 0.126a Listar Listar 0.127a Listar Listar 0.129a Ecartis Ecartis 1.0.0 Snapshot 2002-01-21

2 EDB exploits

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and previous versions does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.

Ecartis Ecartis 1.0.0 Snapshot 2002-01-21 Ecartis Ecartis 1.0.0 Snapshot 2002-01-25 Listar Listar 0.126a Listar Listar 0.127a Listar Listar 0.129a

Unknown vulnerability in ecartis 0.x prior to 0.129a+1.0.0-snap20020514-1.3 and 1.x prior to 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.

Ecartis Ecartis 0.129a Ecartis Ecartis 1.0.0 Snapshot 2002-01-21 Ecartis Ecartis 1.0.0 Snapshot 2003-03-12 Ecartis Ecartis 1.0.0 Snapshot 2003-03-18 Ecartis Ecartis 1.0.0 Snapshot 2002-01-25 Ecartis Ecartis 1.0.0 Snapshot 2002-04-27 Ecartis Ecartis 1.0.0 Snapshot 2003-04-16 Ecartis Ecartis 1.0.0 Snapshot 2003-04-17 Ecartis Ecartis 1.0.0 Snapshot 2002-05-14 Ecartis Ecartis 1.0.0 Snapshot 2002-10-13 Ecartis Ecartis 1.0.0 Snapshot 2003-02-27 Ecartis Ecartis 1.0.0 Snapshot 2003-03-03 Ecartis Ecartis 1.0.0 Snapshot 2003-03-09

Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote malicious users to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.

Ecartis Ecartis 1.0.0 Snapshot 2002-01-21 Listar Listar 0.126a Listar Listar 0.127a Listar Listar 0.129a

Unknown vulnerability in ecartis prior to 1.0.0 does not properly validate user input, which allows malicious users to obtain mailing list passwords.

Ecartis Ecartis 1.0.0

Multiple buffer overflows in ecartis prior to 1.0.0 allow malicious users to cause a denial of service and possibly execute arbitrary code.

Ecartis Ecartis 1.0.0

Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote malicious users to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.

Ecartis Ecartis 1.0.0 Snapshot 2002-10-13

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook