Roundcube Multiple Buffer Overflow Vulnerabilities (CVE-2015-2181)

Description

Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.

Remediation

References

CVE-2015-2181

Related Vulnerabilities

WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Request Forgery (5.6)

MySQL CVE-2017-10165 Vulnerability (CVE-2017-10165)

Magento Improper Access Control Vulnerability (CVE-2021-21020)

Atlassian Jira Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2313)

Frontaccounting Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5117)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H