221 matches found
AXIMilter Detection
The remote service is an AXIGEN milter filtering daemon, also known as AXIMilter, which is used by AXIGEN to interface with third-party milters such as Avira MailGate, Symantec Brightmail AntiSpam, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
AXIGEN Mail Server AXIMilter CNHO Command Remote Format String
The version of AXIMilter installed on the remote host fails to sanitize input of format string identifiers. Using a specially- crafted packet, an unauthenticated, remote attacker can crash the service or possibly execute arbitrary code on the remote host subject to the privileges under which the...
Format string
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...
CVE-2008-0434
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...
CVE-2008-0434
AXIGEN Mail Server 5.0.2 contains a format string vulnerability in the AXIMilter CNHO command that allows remote attackers to execute arbitrary code (or crash the service) by sending specially crafted input. The issue is in the AXIMilter component and relates to unsanitized format string identifi...
CVE-2008-0434
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...
Axigen AXIMilter过滤模块远程格式串处理漏洞
BUGTRAQ ID: 27363 Axigen Mail Server是一款小型的邮件服务器。 AXIGEN邮件服务器的AXIMilter模块在解析邮件数据时存在格式串漏洞，如果远程攻击者向AXIMilter所监听的TCP端口发送了包含有格式串标识符的特制数据的话，就可能导致拒绝服务或执行任意指令。 Axigen Mail Server 5.0.2 Axigen ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.axigen.com/ http://www.sebug.net/exploit/2999...
Axigen <= 5.0.2 AXIMilter Remote Format String Exploit
No description provided by source. / Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include stdio.h include netinet/in.h include sys/socket.h include sys/types.h include sys/uio.h include unistd.h include string.h char buf =...
Axigen AXImilter format string vulnerability
CNHO header buffer overflow...
Axigen 5.0.2 - AXIMilter Remote Format String
/ Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include include include include include include include char buf = "FROM:\r\nEHLO:\r\nCNIP:\r\nCNPO:\r\nCNHO: " / offsets / "\xb8\x96\x05\x08\xb9\x96\x05\x08\xba\x96\x05\x08\xbb\x96\x05\x08"...
Axigen 5.0.2 - AXIMilter Remote Format String
Axigen 5.0.2 - AXIMilter Remote Format String / Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include include include include include include include char buf = "FROM:\r\nEHLO:\r\nCNIP:\r\nCNPO:\r\nCNHO: " / offsets /...
Axigen <= 5.0.2 AXIMilter Remote Format String Exploit
Exploit for linux platform in category remote exploits ====================================================== Axigen include include include include include include char buf = "FROM:\r\nEHLO:\r\nCNIP:\r\nCNPO:\r\nCNHO: " / offsets / "\xb8\x96\x05\x08\xb9\x96\x05\x08\xba\x96\x05\x08\xbb\x96\x05\x0...
AXIGEN 5.0.x AXIMilter Format String Exploit
/ Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include stdio.h include netinet/in.h include sys/socket.h include sys/types.h include sys/uio.h include unistd.h include string.h char buf = "FROM:rnEHLO:rnCNIP:rnCNPO:rnCNHO: " / offsets /...
Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit
No description provided by source. / axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string vulnerability in pop3...
Axigen eMail Server 2.0.0b2 - pop3 Remote Format String
Axigen eMail Server 2.0.0b2 - pop3 Remote Format String / axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string...
[Full-disclosure] Axigen server version: 2.0.0-beta1 (Linux/i686) - pop3 remote shell
The code attached exploits a format string vulnerability in the V2 beta version of Axigen. The pop3 service calls syslog in a vulnerable way when the logtype, for the pop3 service, been set to "system" and loglevel is number with 4th bit set. Any unknown command causes the log call with overwriti...
Axigen eMail Server 2.0.0b2 - 'pop3' Remote Format String
/ axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string vulnerability in pop3 /bin/sh to bind to port 31337 optimised...
Axigen format string vulnerability
Format string vulnerability on syslog call...
Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit
Exploit for linux platform in category remote exploits =============================================================== Axigen eMail Server 2.0.0b2 pop3 Remote Format String Exploit =============================================================== / axiagen.c Axigen eMail Server v2.0 beta by fuGich...
CVE-2007-0886
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via certain base64-encoded data on the pop3 port 110/tcp, which triggers an integer overflow...