SpamAssassin and Vipul's Razor antispam filters DoS

CPU exhaustion on malcrafted e-mail headers...

CVE-2005-1867

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

CVE-2005-1867

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

[SA15562] Symantec Brightmail AntiSpam Static Database Password

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Symantec Brightmail AntiSpam database unauthorized access

Static built-in password is used to access database...

CVE-2004-1939

Cross-site scripting XSS vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes %252F in the key parameter...

CVE-2004-1939

CVE-2004-1939 affects Zaep AntiSpam 2.0. The vulnerability is a cross-site scripting (XSS) flaw in the key parameter, exploitable via double-encoded slashes (%252F). The NVD metrics show a base score of 4.3 (medium) with network attack vector, no confidentiality impact, partial integrity impact, ...

CVE-2004-1768

Symantec Brightmail AntiSpam 6.0.1 (before patch 132) is affected by a denial-of-service in the Spamhunter and Language ID character converters when processing messages using ISO-8859-10. The converters crash due to an unrecognized character set. Affected component: character converters in Spamhu...

HashCash antispam token generation utility format tring bug

From: e-mail message header format string bug...

[SA13593] Symantec Brightmail AntiSpam Notifier Denial of Service

TITLE: Symantec Brightmail AntiSpam Notifier Denial of Service SECUNIA ADVISORY ID: SA13593 VERIFY ADVISORY: http://secunia.com/advisories/13593/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote SOFTWARE: Symantec Brightmail AntiSpam 6.x http://secunia.com/product/3656/ DESCRIPTION: A weakne...

Symantec Brightmail AntiSpam DoS

Large number of quarantined spam messages causes notifier service to crash...

CVE-2004-0445

The CVE-2004-0445 issue affects Symantec Symantec Norton Internet Security/Professional (2002–2004), Norton Personal Firewall (2002–2004), Norton AntiSpam 2004, and corporate products Client Firewall 5.01/5.1.1 and Client Security 1.0–2.0, via the SYMDNS.SYS DNS/NBNS processing driver. A speciall...

[Full-Disclosure] Zaep AntiSpam Cross Site Scripting

Zaep AntiSpam Cross Site Scripting ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html SUMMARY Beyond Security has discovered a security vulnerability in http://www.zaep.com/ Zaep AntiSpam 2.0, the...

CVE-2004-0363

Stack-based buffer overflow in the SymSpamHelper ActiveX component symspam.dll in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method...

CVE-2004-1939

Cross-site scripting XSS vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes %252F in the key parameter...

[NT] Zaep AntiSpam Cross Site Scripting

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10139/info It has been reported that Zaep AntiSpam is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI input. This issue could permit a remote attacker to create a...

Zaep AntiSpam Cross Site Scripting

Crossite scripting in /?key= parameter...

Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting

Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10139/info It has been reported that Zaep AntiSpam is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI input. Th...