CVE-2005-1284

CVE-2005-1284 affects ArGoSoft Mail Server Pro 1.8.7.6; the addnew script allows remote attackers to create arbitrary accounts via a direct HTTP POST, even when web-interface account creation is disabled. This is a network‑level issue with CVSS2 base score 7.5 (HIGH). No exploit details or remedi...

CVE-2005-1282

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2005-1283

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

CVE-2005-1283: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

CVE-2005-1284: Undefined Security Weakness

The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request...

CVE-2005-1282: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

ArGoSoft Mail Server Pro <= 1.8.7.6 Multiple Vulnerabilities (XSS, Traversal, Priv Esc)

The version of ArGoSoft Mail Server Pro installed on the remote host suffers from several vulnerabilities, including : - Unauthenticated Account Creation Vulnerability The application does not authenticate requests sent through the web interface before creating mail accounts and may create them...

Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6

ShineShadow Security Report 22042005-04 TITLE: Multiple vulnerabilities in Argosoft Mail Server Pro 1.8.7.6. BACKGROUND ArGoSoft Mail Server is fully functional SMTP/POP3/Finger Pro version also has IMAP module server for Windows 95/98/NT/2000, which will let you turn your computer into the email...

CVE-2005-1283

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

ArGoSoft Mail Server Multiple Vulnerabilities

Binary data 2847.prm...

CVE-2005-0367

Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. dot dot in 1 the filename of an e-mail attachment, 2 the msgatt.rec file, 3 and the /msg, /delete, /folderadd, and /folderdelete...

CVE-2005-0367

This entry documents directory-traversal flaws in ArGoSoft Mail Server (notably versions around 1.8.7.3/1.8.7.6) that allow remote authenticated users to read, delete, or upload arbitrary files. The root cause is traversal via .. in multiple vectors: the filename of an email attachment, the _msga...

CVE-2005-0367: Undefined Security Weakness

Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. dot dot in 1 the filename of an e-mail attachment, 2 the msgatt.rec file, 3 and the /msg, /delete, /folderadd, and /folderdelete...

ArGoSoft Mail Server < 1.8.7.4 HTML Injection

Binary data 2606.prm...

ArGoSoft Mail Server Multiple Traversals

The remote host is running the ArGoSoft WebMail interface. There are multiple flaws in this interface that may allow an authenticated attacker to read arbitrary files on the remote server and create / delete arbitrary directories on the affected host. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2005-0367

Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, delete, or upload arbitrary files via a .. dot dot in 1 the filename of an e-mail attachment, 2 the msgatt.rec file, 3 and the /msg, /delete, /folderadd, and /folderdelete...

ArGoSoft Mail Server < 1.8.7.0 Unspecified XSS

Binary data 2473.prm...

ArGoSoft Mail Server Unspecified XSS

The remote host is running the ArGoSoft WebMail interface. There is a flaw in this interface that could allow an attacker to conduct cross-site scripting XSS attacks against users. No further details have been provided. Nessus solely relied on the banner of this service to issue this alert...

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/7873/info ArGoSoft Mail Server has been reported prone to a denial of service condition when handling multiple GET requests, in rapid succession. An attacker may exploit this...

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/7873/info ArGoSoft Mail Server has been reported prone to a denial of service condition when handling multiple GET requests, in rapid succession. An attacker may exploit this condition to effectively deny service to legitimate ArGoSoft Mail server user...