CVE-2002-1004

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2002-1893

Cross-site scripting XSS vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message...

Crossitescripting in Argosoft Mail Server Pro

Crossite scripting in WebMail, cleartext passwords in cookie :...

ArGoSoft Web-Mail security problem

ArGoSoft Web-Mail security problem. A vulnerability affects ArGoSoft Mail Server Pro for WinNT/2000/XP Version 1.8.1.9 I did not test other versions, this is the only I have, but others should be vulnerable too. The problem is in the Web-Mail interface, it is posible to execute javascript by...

CVE-2002-1004

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2002-1005

ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service CPU consumption by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop...

CVE-2002-1005

ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service CPU consumption by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop...

CVE-2002-1005

CVE-2002-1005 concerns ArGoSoft Mail Server versions 1.8.1.7 and earlier. The issue arises when a webmail user forwards mail to themselves while autoresponse is enabled, creating an infinite loop that causes CPU consumption and a denial of service. This vulnerability is documented in multiple sou...

Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS

Author: Stan Bubrouski Date: August 4, 2002 Product: ArGoSoft Mail Server Pro Versions affected: 1.8.17 current and previous Severity: A malicious user or users could mount a DoS using mail forwarding and automatic responses to render the adminstrative console unresponsive and raise CPU usage to...

Argosoft Mailserver Pro DoS

User can cause message storm by using autoresponder...

ArGoSoft 1.8 Mail Server - Directory Traversal

ArGoSoft 1.8 Mail Server - Directory Traversal source: https://www.securityfocus.com/bid/5144/info ArGoSoft Mail Server is an STMP, POP3 and Finger server for Microsoft Windows environments. ArGoSoft has a built in web server to enable remote access to mail. A directory traversal issue has been...

ArGoSoft 1.8 Mail Server - Directory Traversal

source: https://www.securityfocus.com/bid/5144/info ArGoSoft Mail Server is an STMP, POP3 and Finger server for Microsoft Windows environments. ArGoSoft has a built in web server to enable remote access to mail. A directory traversal issue has been reported in the web server, which could allow...

argospill.sh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team N.finity Security Advisory 03/07/2002 Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal Summary =================== Argosoft Mail Server Pro contains a built-in HTTP server for webmail access. Without logging in, an attacker can d...

Directory traversal in Argosoft Mail Server Plus/Pro

Webmail companent directory traversal...

Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal

Team N.finity Security Advisory 03/07/2002 Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal Summary =================== Argosoft Mail Server Pro contains a built-in HTTP server for webmail access. Without logging in, an attacker can do a reverse directory traversal to retrieve an...

CVE-2001-1043

ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...

CVE-2001-1043

The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...

CVE-2001-1142

The CVE-2001-1142 entry concerns ArGoSoft FTP Server 1.2.2.2, which uses weak password encryption. The underlying issue, as described in the connected sources, is that passwords stored in the password file are protected by weak encryption, enabling an attacker with access to that file to gain pri...

CVE-2001-1142

ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges...

CVE-2000-1194

The provided documents describe CVE-2000-1194 affecting Argosoft FRP server 1.0. An attacker can remotely cause a denial of service and potentially execute arbitrary commands by sending an excessively long string in the USER or CWD commands, indicating a likely input handling/buffer issue. The en...