PatchTheCVEinter7 vulnerabilities
Recent CVEs affecting inter7 products. 14 tracked.
inter7 has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-01-30. Highest priority: CVE-2004-0777 (score 55/100).
- CVE-2007-0558 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attack
- CVE-2006-2346 HIGH 7.5 DOWNGRADE vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an ac
- CVE-2006-1141 HIGH 7.5 DOWNGRADE Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code
- CVE-2005-2820 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web sc
- CVE-2005-2769 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attacker
- CVE-2005-2724 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web sc
- CVE-2005-1308 HIGH 7.5 DOWNGRADE SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect pa
- CVE-2004-2313 MEDIUM 5.0 DOWNGRADE Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct
- CVE-2004-0777 HIGH 7.5 DOWNGRADE Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0
- CVE-2004-0591 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and
- CVE-2004-0224 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0
- CVE-2003-0040 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers
- CVE-2002-1414 MEDIUM 4.6 DOWNGRADE Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environm
- CVE-2001-0990 MEDIUM 4.6 DOWNGRADE Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in clear
FAQ
How do I fix inter7 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is inter7 being exploited right now?
None of the tracked inter7 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which inter7 CVE should I patch first?
CVE-2004-0777 currently ranks highest (55/100): Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.