Directory traversal

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2006-0928

The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the DUMP command, which reveals the operating system, registered user, and registration code...

CVE-2006-0929

CVE-2006-0929 affects the IMAP server of ArGoSoft Mail Server Pro 1.8.8.1. The issue is a directory traversal in the IMAP RENAME command where mailbox names are not filtered for "..", allowing an authenticated remote attacker to create/move folders arbitrarily on the affected system. The connecte...

CVE-2006-0930

Summary: CVE-2006-0930 describes a directory traversal vulnerability in Webmail of ArGoSoft Mail Server Pro 1.8. Affected component: Webmail/UIDL handling. Root cause: improper handling of the UIDL parameter allowing directory traversal via “..” sequences, enabling a remote authenticated user to ...

CVE-2006-0928

The CVE-2006-0928 issue affects ArGoSoft Mail Server Pro 1.8, where the POP3 server exposes a _DUMP command that unauthenticated remote users can use to disclose sensitive information (OS, registered user, and registration code). The NVD entry records a base score of 5.0 (Medium) with network acc...

CVE-2006-0929

Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...

CVE-2006-0930

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

Secunia Research: ArGoSoft Mail Server Pro viewheaders Script Insertion

====================================================================== Secunia Research 27/02/2006 - ArGoSoft Mail Server Pro viewheaders Script Insertion - ====================================================================== Table of Contents Affected...

ArGoSoft Mail Server Pro Webmail viewheaders Multiple Field XSS

The remote host is running ArGoSoft Mail Server Pro, a messaging system for Windows. According to its banner, the webmail server bundled with the version of ArGoSoft Mail Server Pro installed on the remote host fails to properly filter message headers before displaying them as part of a message t...

Multiple ArGoSoft Mail Server Pro security vulnerabilities

Information leak with POP3 DUMP command, directory traversal with IMAP RENAME command, directory traversal and crossite scripting with Web interface...

NSAG-200-24.02.2006.txt

Advisory: NSAG-¹200-24.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: ArGoSoft Mail Server Pro 1.8 IMAP Site of manufacturer: www.argosoft.com The status: 19/11/2005 - Publication is postponed...

ArGoSoft FTP server remote heap overflow

-- Title: ArGoSoft FTP server remote heap overflow -- Affected Products: ArGoSoft FTP server 1.4.3.5 current and prior -- Affected Vendor: ArGoSoft - http://www.argosoft.com -- Impact: DoS, Arbitrary Code Execution -- Where: From remote -- Type: Heap Overflow -- Vulnerability Details: A remote...

NSAG-201-24.02.2006.txt

Advisory: NSAG-¹201-24.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: ArGoSoft Mail Server Pro 1.8 POP Site of manufacturer: www.argosoft.com The status: 19/11/2005 - Publication is postponed...

argoOverflow.txt

-- Title: ArGoSoft FTP server remote heap overflow -- Affected Products: ArGoSoft FTP server 1.4.3.5 current and prior -- Affected Vendor: ArGoSoft - http://www.argosoft.com -- Impact: DoS, Arbitrary Code Execution -- Where: From remote -- Type: Heap Overflow -- Vulnerability Details: A remote...

ArGoSoft FTP Server 1.4.3.5 - Remote Buffer Overflow (PoC)

!/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port = @ARGV1; $debug = @ARGV2; $user = @ARGV3; $pass = @ARGV4;...

ArGoSoft FTP Server <= 1.4.3.5 Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port = @ARGV1; $debug = @ARGV2;...

ArGoSoft Mail Server < 1.8.8.6 '_DUMP' Information Disclosure

Binary data 3447.prm...

ArGoSoft FTP Server <= 1.4.3.5 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= ArGoSoft FTP Server new"$host",Port = $port, TimeOut = 30, Debug= $debug or die "- Connection failed\n"; print "+ Connect OK!\n"; print "Logging...\n"; if !$user $user = "test"; $pass =...

ArGoSoft Mail Server _DUMP Command System Information Disclosure

The remote host is running ArGoSoft Mail Server, a messaging system for Windows. An unauthenticated attacker can gain information about the installed application as well as the remote host itself by sending the 'DUMP' command to the POP3 server. C Tenable Network Security, Inc. include"compat.inc...

ArGoSoft FTP Server 1.4.3.5 - Remote Buffer Overflow (PoC)

ArGoSoft FTP Server 1.4.3.5 - Remote Buffer Overflow PoC !/usr/bin/perl ---------------------------------------------------- ArgoSoftFTP.pl - PoC exploit for ArgoSoft FTP Server Jerome Athias ---------------------------------------------------- use Net::FTP; geting data $host = @ARGV0; $port =...