Daniel Kahn Gillmor

**Nome do software vulnerável e versões afetadas: Versões do ZPanel anteriores à 10.1.0 Descrição: A vulnerabilidade permite a execução remota de comandos. Recomendações: Para versões anteriores à 10.1.0, atualize para a versão 10.1.0 ou posterior para resolver o problema.

The issue concerns the nginx http proxy module, which does not verify the peer identity of the HTTPS origin server. This lack of verification could facilitate a man-in-the-middle attack (MITM).

The issue affects PGP/MIME encrypted messages processed by the Vaultive O365 frontend. When such messages are injected via IMAP or SMTP, their Content-Type is altered from 'multipart/encrypted' to 'text/plain'. This modification causes most PGP/MIME-capable mail user agents to fail at decrypting the messages properly, resulting in a Denial of Service. A common consequence of this issue is that senders are requested to resend the emails without encryption, potentially leading to Information Disclosure.

The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives. This can potentially result in local privilege escalation.

The issue is related to a format string vulnerability in the extractPages function. This vulnerability allows remote attackers to cause a denial of service, resulting in a crash, by including format string specifiers in a destination filename.

The issue is a stack-based buffer overflow in the `extractPages` function, located in `utils/pdfseparate.cc`, which can be exploited by remote attackers. This can lead to a denial of service (crash) and potentially allow the execution of arbitrary code via a source filename.

The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a series of HTTP requests. This is due to the mod fcgid module not recognizing the FcgidMaxProcessesPerClass directive for a virtual host, leading to a process count higher than the intended limit.

The issue allows local users to gain sensitive information by reading certain files due to weak file permissions. This affects (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty.