Ecartis

ecartis

Vendor: Ecartis • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-0332 1Ecartis 1Ecartis Apr 16, 2026 Jan 21, 2006 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files.
CVE-2004-0913 1Ecartis 1Ecartis Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.
CVE-2003-0782 1Ecartis 1Ecartis Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2003-0781 1Ecartis 1Ecartis Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords.
CVE-2003-0162 1Ecartis 1Ecartis Apr 16, 2026 Apr 2, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
CVE-2002-0469 2Ecartis Listar 2Ecartis Listar Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could all...Show more Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.Show less
CVE-2002-0468 2Ecartis Listar 2Ecartis Listar Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad...Show more Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.Show less
CVE-2002-0467 2Ecartis Listar 2Ecartis Listar Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.