[Full-disclosure] Axigen <2.0.0b1 DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 attached are two DoS's used in part to win the beta testing competition of Axigen www.axigen.com mail server for versions 2.0.0b1, the vulnerabilities affect all platforms.. The first exploit is a single byte underflow causing a probabilistic intege...

Axigen <= 2.0.0b1 Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc ================================================== Axigen include include include include include include include define BUFSIZE 1024 define BBUFSIZE BUFSIZE/34+1 define AUTHCMD "AUTH CRAM-MD5\r\n" define QUITCMD "QUIT\r\n" define DEFPORT 110 defin...

Axigen 2.0.0b1 - Remote Denial of Service (1)

Axigen 2.0.0b1 - Remote Denial of Service 1 / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a...

Axigen 2.0.0b1 - Remote Denial of Service (2)

/ doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / / dGFicyBhcmUgZm9yIGZhZ2dvdHNcIQ== / include include includ...

Axigen 2.0.0b1 - Remote Denial of Service (2)

Axigen 2.0.0b1 - Remote Denial of Service 2 / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...

Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)

Exploit for linux platform in category dos / poc ====================================================== Axigen include include include include include include include define BUFSIZE 1024 define BBUFSIZE BUFSIZE/34+1 define AUTHCMD "1 AUTHENTICATE PLAIN\r\n" define APPENDCMD "2 APPEND...

Axigen 2.0.0b1 - Remote Denial of Service (1)

/ doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE then you crashed the server but at too...