221 matches found
CVE-2007-0887
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service NULL dereference and application crash via a base64-encoded "\x00" sequence on the imap port 143/tcp...
Design/Logic Flaw
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service NULL dereference and application crash via a base64-encoded "\x00" sequence on the imap port 143/tcp...
Integer overflow
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via certain base64-encoded data on the pop3 port 110/tcp, which triggers an integer overflow...
CVE-2007-0887
AXIGEN Mail Server (version range 1.2.6–2.0.0b1) contains an input parsing flaw in login credentials handling that can be triggered by a base64-encoded "*\x00" sequence over IMAP (port 143/tcp). This leads to a denial of service via a NULL dereference and application crash. The available sources ...
CVE-2007-0887
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service NULL dereference and application crash via a base64-encoded "\x00" sequence on the imap port 143/tcp...
CVE-2007-0886
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via certain base64-encoded data on the pop3 port 110/tcp, which triggers an integer overflow...
CVE-2007-0886
AXIGEN Mail Server vulnerability CVE-2007-0886 involves a heap-based buffer underflow in AXIGEN 1.2.6 through 2.0.0b1. Remote attackers can trigger denial of service ( crashes ) and possibly arbitrary code execution via certain base64-encoded data on the POP3 port (110/tcp), due to an integer ove...
axigen 1.2.6 - 2.0.0b1 DoS (x86-lnx)
No description provided by source. / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE the...
Axigen Mail Server多个远程拒绝服务漏洞
Axigen Mail Server是一款小型的邮件服务器。 Axigen Mail Server中存在两个拒绝服务漏洞，远程攻击者可能利用此漏洞导致服务器程序崩溃。 如果能够向服务器发送恶意请求的话，就可能在调用memcpy时导致整数溢出或空指针引用，服务器会崩溃。 Axigen Mail Server 2.0.0b1 Axigen Mail Server 1.2.6 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.axigen.com/ http://www.sebug.net/show-exp-1140.html...
AXIGEN Mail Server < 2.0.0 Multiple Remote Vulnerabilities
The remote host is running AXIGEN Mail Server, a messaging system for Linux and BSD. The POP3 server component of AXIGEN Mail Server contains a format string vulnerability because it calls syslog when logtypeis set to 'system'. In addition, the IMAP server component is affected by two denial of...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit
No description provided by source. / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE the...
AXIGEN Mail Server IMAP Server Multiple Authentication Methods DoS
Binary data 3906.prm...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit
Exploit for linux platform in category dos / poc ================================================== Axigen include include include include include include include define BUFSIZE 1024 define BBUFSIZE BUFSIZE/34+1 define AUTHCMD "AUTH CRAM-MD5\r\n" define QUITCMD "QUIT\r\n" define DEFPORT 110 defin...
[Full-disclosure] Axigen <2.0.0b1 DoS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 attached are two DoS's used in part to win the beta testing competition of Axigen www.axigen.com mail server for versions 2.0.0b1, the vulnerabilities affect all platforms.. The first exploit is a single byte underflow causing a probabilistic intege...
Axigen Mail Server DoS
Off-by-one overflow in POP3 CRAM-MD5 authentication, NULL pointer dereference in IMAP APPEND command...
Axigen 2.0.0b1 - Remote Denial of Service (1)
Axigen 2.0.0b1 - Remote Denial of Service 1 / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a...
Axigen 2.0.0b1 - Remote Denial of Service (2)
/ doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / / dGFicyBhcmUgZm9yIGZhZ2dvdHNcIQ== / include include includ...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
Exploit for linux platform in category dos / poc ====================================================== Axigen include include include include include include include define BUFSIZE 1024 define BBUFSIZE BUFSIZE/34+1 define AUTHCMD "1 AUTHENTICATE PLAIN\r\n" define APPENDCMD "2 APPEND...
Axigen 2.0.0b1 - Remote Denial of Service (2)
Axigen 2.0.0b1 - Remote Denial of Service 2 / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...