99 matches found
mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Remote Code Execution
No description provided by source. !-- ---------------------------------------------------------------------------- :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Arbitrary Data Write & Remote Code Execution...
mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution
Exploit for unknown platform in category remote exploits ================================================================= mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution ================================================================= GoodFellas Security R...
mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Code Execution
No description provided by source. !-- ---------------------------------------------------------------------------- :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Arbitrary Data Write & Remote Code Execution...
mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data WriteCode Execution
mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data WriteCode Execution GoodFellas Security Research Team Technical Details ----------------- Telnet service will be started in 2 reboot. Any other kind of exploit could be easily set up because the attacker can write files and put specific data...
mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data Write/Code Execution
GoodFellas Security Research Team Technical Details ----------------- Telnet service will be started in 2 reboot. Any other kind of exploit could be easily set up because the attacker can write files and put specific data into these files. Attacker could also encrypt easily the HTML file u...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...
CVE-2006-0978
Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...
CVE-2006-0978
Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...
CVE-2006-0978: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...
Directory traversal
Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...
Directory traversal
Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...
Code injection
The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the DUMP command, which reveals the operating system, registered user, and registration code...
CVE-2006-0929
Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...
CVE-2006-0928
The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the DUMP command, which reveals the operating system, registered user, and registration code...
CVE-2006-0930
Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...
CVE-2006-0930
Summary: CVE-2006-0930 describes a directory traversal vulnerability in Webmail of ArGoSoft Mail Server Pro 1.8. Affected component: Webmail/UIDL handling. Root cause: improper handling of the UIDL parameter allowing directory traversal via “..” sequences, enabling a remote authenticated user to ...
CVE-2006-0929
CVE-2006-0929 affects the IMAP server of ArGoSoft Mail Server Pro 1.8.8.1. The issue is a directory traversal in the IMAP RENAME command where mailbox names are not filtered for "..", allowing an authenticated remote attacker to create/move folders arbitrarily on the affected system. The connecte...
CVE-2006-0928
The CVE-2006-0928 issue affects ArGoSoft Mail Server Pro 1.8, where the POP3 server exposes a _DUMP command that unauthenticated remote users can use to disclose sensitive information (OS, registered user, and registration code). The NVD entry records a base score of 5.0 (Medium) with network acc...