PatchTheCVE: ecartishttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-0332: Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, whihttps://patchthecve.com/cve/CVE-2006-0332.htmlhttps://patchthecve.com/cve/CVE-2006-0332.htmlTue, 16 Jun 2026 22:20:21 +0000MEDIUM 6.4: Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files.CVE-2004-0913: Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 https://patchthecve.com/cve/CVE-2004-0913.htmlhttps://patchthecve.com/cve/CVE-2004-0913.htmlTue, 16 Jun 2026 22:06:39 +0000MEDIUM 4.6: Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.CVE-2003-0782: Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly exhttps://patchthecve.com/cve/CVE-2003-0782.htmlhttps://patchthecve.com/cve/CVE-2003-0782.htmlTue, 16 Jun 2026 22:02:49 +0000HIGH 10.0: Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.CVE-2003-0781: Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers tohttps://patchthecve.com/cve/CVE-2003-0781.htmlhttps://patchthecve.com/cve/CVE-2003-0781.htmlTue, 16 Jun 2026 22:02:49 +0000HIGH 10.0: Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords.CVE-2003-0162: Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other uhttps://patchthecve.com/cve/CVE-2003-0162.htmlhttps://patchthecve.com/cve/CVE-2003-0162.htmlTue, 16 Jun 2026 22:01:40 +0000HIGH 7.5: Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.CVE-2002-0469: Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartihttps://patchthecve.com/cve/CVE-2002-0469.htmlhttps://patchthecve.com/cve/CVE-2002-0469.htmlTue, 16 Jun 2026 21:57:30 +0000HIGH 7.2: Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.CVE-2002-0468: Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gainhttps://patchthecve.com/cve/CVE-2002-0468.htmlhttps://patchthecve.com/cve/CVE-2002-0468.htmlTue, 16 Jun 2026 21:57:30 +0000MEDIUM 4.6: Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (CVE-2002-0467: Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to executhttps://patchthecve.com/cve/CVE-2002-0467.htmlhttps://patchthecve.com/cve/CVE-2002-0467.htmlTue, 16 Jun 2026 21:57:30 +0000HIGH 10.0: Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.