Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)

No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...

Mercur Messaging 2005 (Windows 2000 SP4) - IMAP 'Subscribe' Remote Overflow

!/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to our shellcode. However this buffer into which EBX points will give a...

CVE-2005-4833

The affected product is IBM WebSphere Application Server 6.0 prior to 20050201, vulnerable when serving pages in an Application WAR or an Extended Document Root. The root cause is lack of URL normalization, allowing remote attackers to access the JSP source code and other sensitive information vi...

CVE-2005-4834

IBM WebSphere Application Server WAS 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container...

CVE-2005-4834

CVE-2005-4834 affects IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3, where incorrect request processing by the web container allows remote attackers to obtain JSP source code and other sensitive information. The underlying issue is in the web container’s handling of requests, ena...

Fixed in Apache Tomcat 5.5.23, 5.0.SVN

Important: Information disclosure CVE-2005-2090 Requests with multiple content-length headers should be rejected as invalid. When multiple components firewalls, caches, proxies and Tomcat process a sequence of requests where one or more requests contain multiple content-length headers and several...

Cross site scripting

A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting XSS attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388...

CVE-2005-1730

CVE-2005-1730 covers multiple vulnerabilities in the OpenSSL ASN.1 parser as used by Novell iManager 2.0.2. The issue allows remote attackers to cause a denial of service via crafted packets, demonstrated by an OpenSSL ASN.1 brute-forcer. The root cause is tied to how the ASN.1 parser handles cra...

CVE-2005-4832

The CVE-2005-4832 entry concerns SQL injection in Oracle Database Server 10g impacting the SYS.DBMS_CDC_SUBSCRIBE and SYS.DBMS_CDC_ISUBSCRIBE packages, via the SUBSCRIPTION_NAME parameter. Connected sources confirm remote authenticated exploitation that can lead to arbitrary SQL execution with el...

CVE-2005-4831

Removed by vendor...

CVE-2005-4831

The CVE-2005-4831 issue affects ViewCVS up to at least version 0.9.2, where the content-type parameter can be used to set the HTTP Content-Type header to arbitrary values. This can enable cross-site scripting (XSS) and related attacks (demonstrated with text/html, and with image/jpeg rendered as ...

CVE-2005-4830

CVE-2005-4830 documents a CRLF injection vulnerability in ViewCVS version 0.9.2 of the viewcvs component. The flaw allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting by sending CRLF sequences in the content-type parameter. Affected software is ViewCVS 0.9...

CVE-2005-4829

Technical details about CVE-2005-4829 are not publicly provided in the connected documents. The descriptions lack specifics. Monitor for updates from vendors and security advisories.

CVE-2006-7040

Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service crash via a TOP command to the POP3 service...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7039

The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service crash via a message with a long subject field...

CVE-2006-7040

Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service crash via a TOP command to the POP3 service...

CVE-2006-7040

CVE-2006-7040 concerns MERCUR Messaging (2005) prior to Service Pack 4. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a TOP command to the POP3 service. Affected product/version: MERCUR Messaging 2005 before SP4. Root cause details are not explicitly st...

CVE-2006-7038

CVE-2006-7038 refers to multiple buffer overflow flaws in MERCUR Messaging 2005 prior to Service Pack 4. The issues enable remote denial of service (crash) when an attacker sends (1) excessively long command lines to port 32000 and (2) certain SMTP-related name service queries not properly handle...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...